Topic Replies Views Activity
VMware ESXi remote code execution - steps to defend your systems (CVE-2020-3992)
blog
esxi ,  vmware ,  linux ,  ovirt
1 86 June 1, 2021
A technical look a Horusec - OpenSource Risk-driven Application Security for DevOps (SAST / DAST / CAST)
tech-notes
sast ,  dast ,  cast ,  jenkins ,  continuous-integration ,  containers ,  code-reviews ,  coding ,  devops
1 71 May 19, 2021
Network Security Monitoring - Threat Hunting Snippets
Snippets
threat-hunting ,  zeek ,  network_forensics ,  linux ,  rita ,  passer
0 80 May 16, 2021
Pf-dup on a PfSense gateway for separate distributed IDS sensors
blog
intrusion-detection ,  openbsd ,  pfsense ,  linux ,  suricata ,  esxi ,  vmware ,  zeek ,  cnc ,  lab-building
1 140 May 16, 2021
KubeCon + CloudNativeCon Europe 2021+ Pipeline hack - my wrap-up
blog
compliance ,  security_management ,  devops ,  kubernetes ,  linux ,  information_management ,  infosec_con
1 89 May 14, 2021
Discourse as a blog / knowledge base since Nov 2015. Documentation is not boring
blog
editorial ,  discourse-app ,  information_management
1 89 May 3, 2021
Technical Compliance - Enterprise Security beyond silos, gimmicks and paper shields
wiki
compliance ,  iso-27001 ,  security_management ,  risk_management ,  bsi-standards ,  vda-tisax ,  nist ,  gdpr ,  pci-dss
1 111 April 29, 2021
CentOS 7 on a Lenovo T480 in an enterprise environment
wiki
linux-desktop ,  linux ,  centos
1 731 April 29, 2021
Rate limiting (Technitium) DNS with pfSense (Community Edition)
blog
dns ,  firewall ,  network-engineering ,  pfsense
1 111 April 29, 2021
AWS Security Reviews with the command-line
Snippets
automation ,  aws ,  cloud
1 44 April 29, 2021
Elasticsearch API and Python - JSON in, garbage out
wiki
elasticsearch ,  python ,  jupyter ,  graphs ,  pandas ,  networkx ,  data_science ,  log_management ,  siem
1 923 April 29, 2021
How to use ssh ProxyCommands on Windows 10 from Powershell
blog
ssh ,  windows-environment ,  linux ,  openbsd
1 2997 April 29, 2021
Motivation for Risk Analysis to improve Risk Management? Or do we just manage the chaos?
blog
iso-27005 ,  iso-27001 ,  fair ,  iso-31000 ,  data_science ,  compliance ,  security_metrics
1 283 April 29, 2021
Quick-tipp: Windows Group Policy for Software Restrictions in suspicious folders
tech-notes
windows-environment ,  active-directory ,  group-policies ,  quick-tipp
1 237 April 29, 2021
Quick-tipp: use Online file systems from WSL 1 (Ubuntu on Windows 10)
tech-notes
quick-tipp ,  windows ,  wsl_1
1 240 April 29, 2021
Linux Software-Security - practical things
public-wiki-drafts
linux ,  aslr ,  gdb ,  abi ,  unix ,  c ,  coding
1 56 April 29, 2021
InfoSec Jupyterthon (May 2020) - links
wiki
threat-hunting ,  coding ,  python ,  jupyter ,  infosec_con
1 44 April 29, 2021
How to rock at Serverless - from beginner to Knative and Kubeless
blog
automation ,  coding ,  cloud ,  devops ,  linux ,  jenkins ,  java ,  javascript ,  spring ,  react ,  serverless ,  micro-services ,  python ,  kubernetes ,  knative
1 999 April 29, 2021
Autopsy - lab notes (hands on Blue Team)
public-wiki-drafts
forensics ,  incident_response ,  autopsy
1 50 April 29, 2021
Web Security basics: Third-Party assets and Application Security
wiki
web_apps ,  appsec ,  build-system ,  supply-chain
1 261 April 29, 2021
Quick-tipp: use Eclipse Theia as a Cloud-IDE like a web-version of VScode
tech-notes
quick-tipp ,  private_cloud ,  coding
1 310 April 29, 2021
Real World Java Security
public-wiki-drafts
appsec ,  java ,  coding ,  sast ,  sdlc
1 119 April 29, 2021
C++ Reverse Engineering - concepts and tools - Ghidra and WinDbg Preview
wiki
c ,  cpp ,  reverse_engineering ,  ghidra ,  radare ,  x86_32 ,  x86_64 ,  arm ,  windbg
1 3939 April 29, 2021
CodeQL - experiential notes for code audits, bug-hunts and CI/CD
public-wiki-drafts
vulnerability-discovery ,  sast ,  code-reviews ,  coding ,  variant-analysis ,  java ,  spring
1 1582 April 29, 2021
Ghidra Wiki
wiki
java ,  malware-analysis ,  reverse_engineering ,  ghidra
1 18632 April 29, 2021
WinDBG Preview
wiki
windbg ,  debugging
1 711 April 29, 2021
Linux Without Borders, Edition 2 (Feb 2020): Windows Subsystem for Linux, X Window System and Remote Desktop Protocol - thin client experiences for lean DevOps teams
blog
linux-desktop ,  windows-environment ,  linux ,  x11 ,  rdp ,  gloss
1 584 April 29, 2021
Where the devil is in crypto - hands on bit flipping
public-wiki-drafts
cryptography ,  assessments ,  offdev ,  risk ,  threat-modeling
1 50 April 29, 2021
Docker - the universal build system for system- and security-development (wiki)
wiki
docker ,  build-system ,  devops ,  linux ,  windows-environment ,  namespaces ,  seccomp ,  filesystems
1 1190 April 29, 2021
Oracle DB - Enterprise Security wiki
public-wiki-drafts
dbms ,  oracle ,  rdbms ,  rac
1 35 April 29, 2021