NEW BOT Телеграм, страница

Создание web-сервиса для проверки/просмотра получаемых POST данных

В общем ситуация сложилась следующая, решил я добавить в CWICCS (PowerShell инструмент проверки конфигураций Windows) сохранение и отправку данных о результатах проверки в JSON формате, сохранить данные в JSON из PowerShell довольно просто и отослать их в web-сервис тоже довольно просто, но пока нет web-сервиса, то нужно как-то тестировать что уходит, какие заголовки и т.п.

Итак в самом начале я имею отчеты CWiCCS в JSON формате и желание их отправлять в web-сервис

Содержание
- Создание Nodejs приложения
- Создание сервиса для просмотр отправляемых (POST) данных
- Отправка данных из Curl
- Пример отправки данных из Postman
- Пример отправки данных из PowerShell

https://sys-adm.in/systadm/942-nodejs-sozdanie-servisa-dlya-proverki-prosmotra-poluchaemykh-dannykh.html

lab.sys-adm.in

Sys-Admin Laboratory

Open Sys-Admin BLD DNS - Focus on information for free with adblocking and implicit cybersecurity threat prevention.

3.89K viewsYevgeniy Goncharov, 11:48

Sys-Admin Up

"How to Safely Merge Branch to Master in Git | CloudBees Blog" https://www.cloudbees.com/blog/git-merge-branch-to-master

CloudBees

How to Safely Merge Branch to Master in Git | CloudBees Blog

Learn the fundamentals of how branches work in Git and see how to merge a branch into master safely and easily.

180 viewsYevgeniy Goncharov, 04:12

Sys-Admin Up

"How to Make your Console Output Fun and Interactive in JavaScript and Node.js" https://www.freecodecamp.org/news/how-to-make-your-console-log-statements-look-fun-and-interactive/

freeCodeCamp.org

How to Make your Console Output Fun and Interactive in JavaScript and Node.js

By Vasyl Lagutin In this tutorial, you'll learn how to add a randomized delay to the console.log statements in JavaScript and Node.js. Why would you want to do this? First of all, programming should be fun. And making a boring thing like console.log...

177 viewsYevgeniy Goncharov, 04:14

Sys-Admin Up

"CI/CD and React: Create a pipeline using Heroku and CircleCI - LogRocket Blog" https://blog.logrocket.com/ci-cd-and-react-create-a-pipeline-using-heroku-and-circleci/

LogRocket Blog

CI/CD and React: Create a pipeline using Heroku and CircleCI - LogRocket Blog

Merging branches and integrating new changes into new codebases can be avoided or minimized with a robust CI/CD pipeline in React apps.

175 viewsYevgeniy Goncharov, 09:34

Sys-Admin Up

Vailyn is a multi-phased vulnerability analysis and exploitation tool

for path traversal/directory climbing vulnerabilities. It is built to make it as performant as possible, and to offer a wide arsenal of filter evasion techniques.

https://github.com/VainlyStrain/Vailyn

#tool #github #hack

GitHub

GitHub - VainlyStrain/Vailyn: A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python

A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python - VainlyStrain/Vailyn

175 viewsYevgeniy Goncharov, edited 10:47

Sys-Admin Up

Semgrep - is a lightweight, offline, open-source, static analysis tool. Run community rules or write your own in less than 5 minutes.

https://semgrep.dev

#tool #github

GitHub

GitHub - semgrep/semgrep: Lightweight static analysis for many languages. Find bug variants with patterns that look like source…

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code. - semgrep/semgrep

185 viewsYevgeniy Goncharov, edited 10:50

Sys-Admin Up

bulwark - An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.

https://github.com/softrams/bulwark#launch-with-docker

#tool #github

GitHub

GitHub - softrams/bulwark: An organizational asset and vulnerability management tool, with Jira integration, designed for generating…

An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports. - softrams/bulwark

191 viewsYevgeniy Goncharov, edited 11:40

Sys-Admin Up

Deploying your first app on Kubernetes

Интерактивный туториал

https://kubernetes.io/docs/tutorials/kubernetes-basics/deploy-app/deploy-intro/

Kubernetes

Using kubectl to Create a Deployment

Objectives Learn about application Deployments. Deploy your first app on Kubernetes with kubectl. Kubernetes Deployments A Deployment is responsible for creating and updating instances of your application. Note:This tutorial uses a container that requires…

299 viewsYevgeniy Goncharov, 12:33

Sys-Admin Up

Быстрое шифрование и расшифровка файлов при помощи VIM

Содержание
- Как зашифровать файл при помощи vim
- Как посмотреть чем зашифрован файл
- Как убрать шифрование
- Алгоритмы шифрования

https://sys-adm.in/security/943-bystroe-shifrovanie-i-rasshifrovka-fajlov-pri-pomoshchi-vim.html

lab.sys-adm.in

Sys-Admin Laboratory

Open Sys-Admin BLD DNS - Focus on information for free with adblocking and implicit cybersecurity threat prevention.

4.21K viewsYevgeniy Goncharov, edited 13:42

Sys-Admin Up

Macaron - is a high productive and modular web framework in Go.

https://github.com/go-macaron/macaron

Еще Go WEB-Фреймворки:
- https://github.com/gin-gonic/gin
- https://www.iris-go.com/
- http://gokit.io/
- https://github.com/labstack/echo

#github #go #web

GitHub

GitHub - go-macaron/macaron: Package macaron is a high productive and modular web framework in Go.

Package macaron is a high productive and modular web framework in Go. - go-macaron/macaron

243 viewsYevgeniy Goncharov, edited 07:32

Sys-Admin Up

Forwarded from ⁣ ⁣

https://nextlinklabs.com/insights/kubernetes-ci-cd-gitlab-with-helm

Nextlinklabs

Building a Kubernetes CI/CD Pipeline with GitLab and Helm | NextLink Labs

The post will show you how you can deploy your applications to Kubernetes via a CI/CD pipeline.

209 viewsYevgeniy Goncharov, 01:12

Sys-Admin Up

CallStranger - check against CallStranger (CVE-2020-12695) vulnerability. An attacker can use this vulnerability for:
• Bypassing DLP for exfiltrating data
• Using millions of Internet-facing UPnP device as source of amplified reflected TCP DDoS / SYN Flood
• Scanning internal ports from Internet facing UPnP devices This noscript only simulates data exfiltration. You can find detailed information on https://www.callstranger.com https://kb.cert.org/vuls/id/339275 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12695 Slightly modified version of https://github.com/5kyc0d3r/upnpy used for base UPnP communication

https://github.com/yunuscadirci/CallStranger

#github #tool

kb.cert.org

CERT/CC Vulnerability Note VU#339275

Universal Plug and Play (UPnP) SUBSCRIBE can be abused to send traffic to arbitrary destinations

194 viewsYevgeniy Goncharov, 15:55

About

Blog

Apps

Platform