Skip to content

Instantly share code, notes, and snippets.

View gavioto's full-sized avatar

gavioto gavioto

View GitHub Profile
@bmaupin
bmaupin / open-source-sso.md
Last active October 6, 2025 09:57
Comparison of some open-source SSO implementations

⚠️ This is not maintained. Feel free to check comments and/or forks for more current options.

Background

This was created years ago; at the time I'd been a Shibboleth admin for nearly a decade but we needed something that could handle OIDC/OAuth and that explicitly supported OpenJDK. After a lot of investigation, I really liked Keycloak/Red Hat Single Sign-On. More details here: Gluu vs keycloack vs wso2 identity management

Comparison

(Items in bold indicate possible concerns)

@ogerardin
ogerardin / Running Docker in Alpine Linux running in QEMU on Windows (64 bits)
Last active November 23, 2021 18:32
Running Docker in Alpine Linux running in QEMU on Windows (64 bits)
Download latest qemu-w64-setup-*.exe from https://qemu.weilnetz.de/w64
Extract qemu-w64-setup-*.exe using 7-Zip to a directory named "qemu"
Download Alpine ISO image (Extended) for x86_64 from https://alpinelinux.org/downloads/
Create disk image using "qemu-img create hd.img 10G"
Copy start.bat next to ISO image and hd.img, adjust qemu path if required
Start QEMU using start.bat
(Let Alpine Linux boot from ISO)
Login using "root" (no password)
Start setup by entering "setup-alpine"

WannaCry|WannaDecrypt0r NSA-Cyberweapon-Powered Ransomware Worm

  • Virus Name: WannaCrypt, WannaCry, WanaCrypt0r, WCrypt, WCRY
  • Vector: All Windows versions before Windows 10 are vulnerable if not patched for MS-17-010. It uses EternalBlue MS17-010 to propagate.
  • Ransom: between $300 to $600. There is code to 'rm' (delete) files in the virus. Seems to reset if the virus crashes.
  • Backdooring: The worm loops through every RDP session on a system to run the ransomware as that user. It also installs the DOUBLEPULSAR backdoor. It corrupts shadow volumes to make recovery harder. (source: malwarebytes)
  • Kill switch: If the website www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com is up the virus exits instead of infecting the host. (source: malwarebytes). This domain has been sinkholed, stopping the spread of the worm. Will not work if proxied (source).

update: A minor variant of the viru

@irbull
irbull / OpenSSLExample.cpp
Created August 11, 2016 18:32
Code signing and verification with OpenSSL
#include <iostream>
#include <openssl/aes.h>
#include <openssl/evp.h>
#include <openssl/rsa.h>
#include <openssl/pem.h>
#include <openssl/ssl.h>
#include <openssl/bio.h>
#include <openssl/err.h>
#include <assert.h>
@dazza-codes
dazza-codes / Vagrantfile
Created September 27, 2015 08:24
Utilities to add an independent data disk to virtualbox vms using vagrant
# -*- mode: ruby -*-
# vi: set ft=ruby :
# This vagrant script relies on
# vagrant plugin install vagrant-triggers
VM_NAME = "vbox-dev"
VM_CPUS = 1
VM_MEMORY = 2 * 1024 # in MB
@so0k
so0k / Query-Registry.ps1
Last active June 27, 2020 14:19
Query a docker registry v2/_catalog endpoint from powershell
[CmdletBinding()]
Param(
[Parameter(Mandatory=$True,Position=1)]
$Filter=".*",
#TODO: handle https & no basic auth as well..
$RegistryEndpoint = "registry.mysite.com",
$UserName = "user",
$Password = "password"
)
@rhelmer
rhelmer / gist:b075f21f44f3e98579b1
Last active November 1, 2022 12:13
herokuish build+deploy using LXC

Introduction

Heroku differs from traditional build & deploy by having the concept of "buildpacks", which are a generic method to identify, compile and package builds. The traditional method here would be to have hardcoded build commands, in a Makefile for instance. Buildpacks generally make custom build+deploy steps uneccessary, although one can specify custom buildpacks if necessary.

When notifying Heroku that a deploy is needed (usually by a Github webook), Heroku will run through all supported buildpacks until one can identify your app, which is then compiled and packaged by the buildpack. The output of this process is referred to as a "slug", which contains your app and all dependencies. For instance, a Python app would have the virtualenv packaged inside it. Heroku automatically deploys slugs that are built successfully.

This document describes a way to use LXC and existing third-party tools to reproduce this setup.

You need to have a server running that accepts webhooks and can take act