These are my links for 22 Apr 2016 through 23 Apr 2016:
- How to use Powershell in an exploit · rapid7/metasploit-framework Wiki
PowerShell is a scripting language developed by Microsoft. It provides API access to almost everything in a Windows platform, less detectable by countermeasures, easy to learn, therefore it is incredibly powerful for penetration testing during post exploitation, or exploit development for payload execution. Take Metasploit’s windows/smb/psexec_psh.rb module for example: it mimics the psexec utility from SysInternals, the payload is compressed and executed from the command line, which allows it to be somewhat stealthy against antivirus. There’s only less than 30 lines of code in psexec_psh.rb (excluding the metadata that describes what the module is about), because most of the work is done by the Powershell mixin, nothing is easier than that. The command line will automatically attempt to detect the architecture (x86 or x86_64) that it is being run in, as well as the payload architecture that it contains. If there is a mismatch it will spawn the correct PowerShell architecture to inject the payload into, so there is no need to worry about the architecture of the target system.
- HOWTO use geoiplookup – Fail2ban
You may be interested in a quick summary of the countries where the attacks come from. This document explains how to find these information.
- IP Address Details – ipinfo.io – Simple, reliable, and affordable IP geolocation data.
- Cryptocat – Chat with your friends, privately.Cryptocat is free software with a simple mission: everyone should be able to chat with their friends in privacy.Open source. All Cryptocat software is published transparently.
Encrypted by default. Every message is encrypted, always.
Forward secure. Chats can’t be decrypted even if your keys are stolen.
Multiple devices. All devices linked to your account will receive forward secure messages, even when offline.
File sharing. Securely share files with friends.
Group chat. Chat with multiple buddies at once (coming soon).
These are my links for 16 Dic 2015 through 21 Dic 2015:
- 29 questions to ask yourself if you’re in devops | www.rohit.io – A few days ago, I had an opportunity to meet and interact with Mike Place, who works as a developer at Saltstack. We had an interesting conversation about devops and how things work in the valley. Mike explained the growing importance of devops in organizations and the rise of devops as a culture that aims to collaboratively deliver systems into production, reliably and effectively.
- H2O – the optimized HTTP/2 server – H2O is a new generation HTTP server providing quicker response to users when compared to older generation of web servers. The server takes full advantage of HTTP/2 features including prioritized content serving and server push, promising outstanding experience to the visitors of your web site. [ via http://onethingwell.org/post/135440804989 ]
- Mattermost – Mattermost is modern communication behind your firewall. As an alternative to proprietary SaaS messaging, Mattermost brings all your team communication into one place, making it searchable and accessible anywhere.
These are my links for 3 Dic 2015 through 8 Dic 2015:
- minio/mc · GitHub – Minio client (mc) provides a set of tools to work with Amazon S3 compatible cloud storage and filesystems. It has features to resume partial downloads, progress bar and parallel copy. Minio client is written in Golang and released under Apache license v2. [ via http://onethingwell.org/post/134793050379 ]
- Choosing an HTTP Status Code — Stop Making It Hard | Racksburg – What could be simpler than returning HTTP status codes? Did the page render? Great, return 200. Does the page not exist? That’s a 404. Do I want to redirect the user to another page? 302, or maybe 301.
- Spinnaker: Global Continuous Delivery – Spinnaker is an open source, multi-cloud continuous delivery platform for releasing software changes with high velocity and confidence. It provides two core sets of features: cluster management and deployment management. Below we give a top-level overview of these features. [ via http://cloudacademy.com/blog/netflix-spinnaker/ ]