Bolt like as Ansible alternative

Bolt is an open source orchestration tool that automates the manual work it takes to maintain your infrastructure.

* https://puppet.com/docs/bolt/latest/bolt.html

#tool

Artillery - Cloud-scale performance testing

Very easy tool for web services benchmarking…:

* https://www.artillery.io

#tool

2022 Unit 42 Incident Response Report

Executive Summary: Every week brings news about threat actors—new campaigns, new groups, new types of attacks, new targets. Defenders can easily wind up playing catchup, but what does it take to flip the noscript?..

Big report abpout of top attacks trends and etc.

Build an automated ecommerce app with WhatsApp Cloud API and Node.js

https://blog.logrocket.com/build-ecommerce-app-whatsapp-cloud-api-node-js/

7 Daily Hacks For Programmers To Make Coding Skills Faster

https://dev.to/devsimc/7-daily-hacks-for-programmers-to-make-coding-skills-faster-a68

Indoor optical fiber eavesdropping approach and its avoidance

🪢 A fast native data type for manipulating large strings in Redis

https://github.com/ekzhang/redis-rope

Gum - A tool for glamorous shell noscripts. Leverage the power of Bubbles and Lip Gloss in your noscripts and aliases without writing any Go code

https://github.com/charmbracelet/gum

#tool #review

The Four Golden Signals for SRE

The four golden signals of monitoring are latency, traffic, errors, and saturation. If you can only measure four metrics of your user-facing system, focus on these four…:

https://sre.google/sre-book/monitoring-distributed-systems/#xref_monitoring_golden-signals

Dart Tutorials

https://dart.dev/tutorials

OctoSQL - is a query tool that allows you to join, analyse and transform data from multiple databases and file formats using SQL:

https://github.com/cube2222/octosql

Fourteen Ways to Read the PID for the Local Security Authority Subsystem Service (LSASS)

Process enumeration is necessary prior to injecting shellcode or dumping memory. Threat actors tend to favour using CreateToolhelp32Snapshot with Process32First and Process32Next to gather a list of running processes. And if they’re a bit more tech-savvy, they’ll use the NtQuerySystemInformation system call directly.

Although this post will focus on obtaining a PID specifically for LSASS, the methods described here can be adapted to resolve PIDs for any process. Some of these are well known and have been discussed before, but there’s also a few new ones that many readers won’t be familiar with…

* https://www.mdsec.co.uk/2022/08/fourteen-ways-to-read-the-pid-for-the-local-security-authority-subsystem-service-lsass/

What Is Bun.js and Why Is the JavaScript Community Excited About It?

https://www.makeuseof.com/what-is-bunjs-why-the-javanoscript-community-excited/

Books library https://news.1rj.ru/str/sysadm_in/203879

NimicStack - Slack spoofing with Nim

NimicStack is the pure Nim implementation of Call Stack Spoofing technique to mimic legitimate programs.

https://github.com/frkngksl/NimicStack

KHS in Almaty (Kazakhstan) at 14-16 September.

With Jayson E. Street (DEF CON Groups Global Ambassador), Author book series of "Dissecting the hack: Series"...

Sys-Adm.in is not only an information partner, but also a participant in the conference 🎉

See more details on official KHS site: https://kazhackstan.kz

SQUIP: Exploiting the Scheduler Queue Contention Side Channel

In this paper, we present the SQUIP attack, the first side-channel attack on scheduler queues. With SQUIP, we measure the precise degree of Scheduler Queue Usage (i.e., occupancy) via Interference Probing. We show that this occupancy level measurement works on microarchitectures of different vendors, namely the Apple M1, AMD Zen 2 and Zen 3…

Kali Linux 2022.3 Release

https://www.kali.org/blog/kali-linux-2022-3-release/