wickett

clean:
	rm -rf ~/.vim/bundle
	rm -rf ~/.vim/plugged

config:
	ln -sf ~/.vim/vimrc ~/.vimrc
	ln -sf ~/.vim/vimrc.local ~/.vimrc.local
	ln -sf ~/.vim/vimrc.local.bundles ~/.vimrc.local.bundles

install: clean config

wickett

# You need homebrew for this
$ brew install ctags git vim
$ git clone git@github.com:wickett/wickett-vim.git ~/.vim

# Installs all the plugins and go dependencies
$ cd ~/.vim
$ make install

wickett

So if you're in Austin for a few days for DevOps Days ATX and want some tips on where to eat... I'm not posting locations or hours or anything, you've got a google. Be aware though a lot of places are closed on mondays.

Barbecue

Texas barbecue is all about the brisket. The best way to eat it is to order 'Moist outside cut' but if you don't like fatty meat go for lean. Here's some great options :

• Rudy's - This is a local chain. If you've never eaten Texas BBQ before this is probably the place to go. It's the IBM of BBQ, nobody ever got fired for buying it. Tell them its your first time and they'll carry on like a pork chop for a few minutes to embarrass you and then proceed to give you a little of each item to taste. The creamed corn here is where its at.

• Franklin BBQ - Arguably the best Texas style BBQ in the world. but is it worth a 4-5 hour wait ? Let us know if you brave the lines.

wickett

Start up your technohipster instance

First create a security group called technohipster with the following ports open to the world:

TCP 22, 443, 8080
UDP 1194

Now launch your instance using a fresh 12.04 ubuntu image ec2-run-instances ami-b53012dc -k YOUR_KEYPAIR -g technohipster --instance-type t1.micro

wickett

source 'https://rubygems.org'

gem 'gauntlt'
gem 'arachni'

wickett

@slow
Feature: make sure our website doesn't expose sensitive directories

Scenario: Start with using dirb and check for default apache directories
  Given "dirb" is installed
  And the following profile:
     | name          | value                              |
     | hostname      | http://lascon.org                  |
     | wordlist      | /opt/wordlists/vulns/apache.txt    |
  When I launch a "dirb" attack with:

wickett

@slow
Feature: make sure our website doesn't expose sensitive directories

Scenario: Start with using dirb and check for default apache directories
  Given "dirb" is installed
  And the following profile:
     | name          | value                              |
     | hostname      | http://lascon.org                  |
     | wordlist      | /opt/wordlists/vulns/apache.txt  |
  When I launch a "dirb" attack with:

wickett

@slow
Feature: Look for cross site scripting (xss) using arachni against a URL

Scenario: Using the arachni, look for cross site scripting and verify no issues are found
  Given "arachni" is installed
  And the following profile:
     | name                | value                          |
     | url                 | http://lascon.org         |
  When I launch an "arachni-simple_xss" attack
  Then the output should contain "0 issues were detected."

wickett

@slow
Feature: make sure our website doesn't expose sensitive directories

Scenario: Start with using dirb and check for default apache directories
  Given "dirb" is installed
  And the following profile:
     | name          | value                 |
     | hostname      | http://lascon.org     |
     | wordlist      | vulns/apache.txt      |
  When I launch a "dirb" attack with:

wickett

@slow
Feature: check to make sure the right ports are open on our server

  Background:
    Given "nmap" is installed
    And the following profile:
      | name       | value        |
      | host       | lascon.org   |

  Scenario: Verify server is open on expected ports