hvanderlaan

#!/usr/bin/env python

""" 
    dynamic-inv-local-network.py - dynamic ansible inventory file for use a local network
    
    usage: ansible --ask-vault-password -i dynamic-inv-local-network.py all -m ping
"""

from __future__ import (print_function, absolute_import, division, unicode_literals)

hvanderlaan

Docker swarm cluster on raspberry pi's

The goal is to create a very cheap docker cluster for the home environment, but still is capable of running multiple docker services. The idea is to use raspberry pi 3 B+ units. These small computers have a 1,4 GHz quadcore ARM cortex A53 soc and 1GB of memory. This should be sufficient to run pi-hole, home-assistant and wordpress websites.

Requirements

• 2 or more raspberry pi 2/3 B/B+
• 2 or more 2.5A micro-usb powersupplies
• 2 or more 8GB or bigger mirco sdhc cards
• HypriotOS image
• Etcher sdcard flasher
• (optional): 5 or more ports 100/1000Gbit switch

hvanderlaan

#cloud-config
# vim: syntax=yaml
#

# The current version of cloud-init in the Hypriot rpi-64 is 0.7.9
# When dealing with cloud-init, it is SUPER important to know the version
# I have wasted many hours creating servers to find out the module I was trying to use wasn't in the cloud-init version I had
# Documentation: http://cloudinit.readthedocs.io/en/0.7.9/index.html

# Set your hostname here, the manage_etc_hosts will update the hosts file entries as well

hvanderlaan

From security scan to rooting a box

A friend of my created a php website / application, and ask me to check the website / application. so if started som simple test to if i could find some nice vulnerablity's. But what i found shocked me.

The information i've got

To annonimize this the fqdn is changed to domain.tld

information gathering: website directories