VirtualTam's bookmarks

61. serverfault - What are the canonical answers we've discovered over the years?

    2021-11-20
    datacenter linux network security server sysadmin

    Permalink
62. testssl.sh-masscan: Make TLS/SSL security mass scans with testssl.sh and import results into ElasticSearch

    2021-11-14
    cryptography/certificate cryptography/certificate-authority network/http network/tcp network/transport-layer-security observability/elastic/elasticsearch

    Permalink
63. glauth - a lightweight LDAP server for development, home use, or CI

    2021-10-19
    network/ldap programming/go security/authentication security/authorization

    Permalink
    • https://github.com/sonicnkt/glauth-ui
64. Terraform code quality - CloudSkiff

    2021-08-21
    cloud-computing configuration-management/terraform infrastructure/automation security

    Permalink
    • https://github.com/tfutils
    • https://github.com/terraform-linters
    • https://terraform-compliance.com/
    • https://github.com/aquasecurity/tfsec
65. Dropbear SSH - a relatively small SSH server and client

    2021-08-08
    network/ssh programming/c security/authentication

    Permalink
    • https://github.com/mkj/dropbear
    • https://www.cyberciti.biz/security/how-to-unlock-luks-using-dropbear-ssh-keys-remotely-in-linux/
    • Dropbear SSH closing connection when attempting to connect as non root user
66. Crypto Museum

    2021-05-23
    cryptography device history museum security

    Permalink
67. Home Assistant, Pwned Passwords and Security Misconceptions

    2021-03-12
    internet-of-things network/http security security/password

    Permalink
68. 389ds in containers

    2021-01-20
    linux/container/docker network/ldap security/authentication security/authorization

    Permalink
    • https://fy.blackhats.net.au/blog/html/pages/ldap_guide_part_1_foundations.html
    • https://fy.blackhats.net.au/blog/html/pages/ldap_guide_part_2_searching.html
    • https://fy.blackhats.net.au/blog/html/pages/ldap_guide_part_3_filters.html
    • https://fy.blackhats.net.au/blog/html/pages/ldap_guide_part_4_schema_and_objects.html
    • https://github.com/389ds/389-ds-base/blob/master/docker/389-ds-fedora/Dockerfile
69. FusionDirectory — a solution to daily management of data stored in an LDAP directory

    2021-01-20
    linux/container/docker network/ldap security/authentication security/authorization

    Permalink
    • https://github.com/tiredofit/docker-fusiondirectory
    • https://hub.docker.com/r/tiredofit/fusiondirectory
70. Storing hashes: bcrypt, pbkdf2, sha256-crypt, sha512-crypt

    2021-01-03
    cryptography cryptography/hash cryptography/hash/bcrypt cryptography/hash/pbkdf2 cryptography/hash/sha security/password

    Permalink
    • https://security.stackexchange.com/questions/4781/do-any-security-experts-recommend-bcrypt-for-password-storage
    • https://security.stackexchange.com/questions/17421/how-to-store-salt
    • https://codahale.com/how-to-safely-store-a-password/
    • https://security.stackexchange.com/questions/133239/what-is-the-specific-reason-to-prefer-bcrypt-or-pbkdf2-over-sha256-crypt-in-pass
    • https://security.stackexchange.com/questions/211/how-to-securely-hash-passwords/31846
71. Kubernetes basic authentication with Traefik - Stack Overflow

    2020-12-21
    linux/container/kubernetes network network/http network/reverse-proxy security/authentication

    Permalink
72. Open Distro for Elasticsearch | Open Distro

    2020-12-20
    cloud-computing cloud-computing/aws machine-learning observability/elastic/elasticsearch observability/logging observability/tracing programming/java security/authentication security/authorization

    Permalink
    • https://github.com/opendistro-for-elasticsearch
    • https://aws.amazon.com/blogs/aws/new-open-distro-for-elasticsearch/
    • https://opendistro.github.io/for-elasticsearch/blog/releases/2020/12/announcing-trace-analytics/
    • https://logz.io/blog/open-distro-for-elasticsearch/
73. Enhanced SSL Load Balancing with Server Name Indication (SNI) TLS Extension - HAProxy Technologies

    2020-12-11
    network/dns network/reverse-proxy network/reverse-proxy/haproxy network/server-name-indication network/tcp network/transport-layer-security

    Permalink
    • https://discourse.haproxy.org/t/req-ssl-sni-and-ssl-termination/2139/3
    • com/@olivier.ragain/haproxy-https-load-balancing-on-sni-207c17398d19
74. X.509 v3 Certificates | Learn mTLS the Hard Way

    2020-09-08
    cryptography/certificate cryptography/encryption network/transport-layer-security openssl security

    Permalink
75. What is "AWS Security Scanner" in my server logs?

    2020-07-31
    cloud-computing/aws network security

    Permalink
    • https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-instance-metadata-service.html
    • https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html
    • https://docs.aws.amazon.com/cli/latest/reference/ec2/modify-instance-metadata-options.html
    • https://aws.amazon.com/blogs/security/defense-in-depth-open-firewalls-reverse-proxies-ssrf-vulnerabilities-ec2-instance-metadata-service/
    • https://aws.amazon.com/blogs/aws/new-host-based-routing-support-for-aws-application-load-balancers/
    • https://aws.amazon.com/about-aws/whats-new/2018/07/elastic-load-balancing-announces-support-for-redirects-and-fixed-responses-for-application-load-balancer/
    • https://www.reddit.com/r/aws/comments/e18e5n/botexploit_what_is_this_trying_to_do_and_how
    • https://www.reddit.com/r/aws/comments/e18e5n/botexploit_what_is_this_trying_to_do_and_how/f8qympp/
    • https://forums.aws.amazon.com/thread.jspa?threadID=316889
    • https://owasp.org/www-community/attacks/Server_Side_Request_Forgery
    • https://www.wired.com/story/capital-one-paige-thompson-case-hacking-spree/
    • https://krebsonsecurity.com/2019/08/what-we-can-learn-from-the-capital-one-hack/
    • https://krebsonsecurity.com/2019/07/capital-one-data-theft-impacts-106m-people/
    • http://www.thecloudavenue.com/2019/08/how-capital-one-hack-was-achieved-in-aws.html
    • http://www.thecloudavenue.com/2019/11/changes-to-aws-ec2-instance-metadata-service.html
76. How we abused Slack's TURN servers to gain access to internal services | Communication Breakdown

    2020-04-09
    cloud-computing/aws multimedia network network/webrtc security streaming video

    Permalink
    • https://webrtchacks.com/
    • https://www.enablesecurity.com/security-assessment/webrtc-pentest/
77. american fuzzy lop - a security-oriented fuzzer

    2020-02-24
    fuzzy input programming/c programming/go programming/testing security

    Permalink
    • http://lcamtuf.coredump.cx/afl/
    • https://github.com/dvyukov/go-fuzz
78. CFSSL: Cloudflare's PKI and TLS toolkit

    2020-02-05
    cloud-computing/cloudflare cryptography cryptography/certificate cryptography/certificate-authority security

    Permalink
    • https://blog.cloudflare.com/introducing-cfssl/
79. rudder-server: Privacy and Security focused Segment-alternative, in Golang and React

    2020-01-10
    framework/react network/http programming/api programming/go route

    Permalink
    • https://rudderlabs.com/
80. SEI CERT C Coding Standard

    2020-01-02
    guidelines programming/c programming/c++ security

    Permalink
    • https://resources.sei.cmu.edu/library/asset-view.cfm?assetID=454220
    • https://www.informit.com/store/secure-coding-in-c-and-c-plus-plus-9780321822130