Skip to main content

Posts

Learn DevOps like a pro techie - PART 1

Recent posts

AquaSec Container Security Solution ( DevSecOps ) - A quickView

  What is AquaSec?      The Aqua Platform is the leading Cloud Native Application Protection Platform (CNAPP) and provides prevention, detection, and response automation across the entire application lifecycle to secure the supply chain, secure cloud infrastructure, and secure running workloads wherever they are deployed.    Solutions : Cloud Native Security Platform CSPM Cloud Security Container Security Kubernetes Security Serverless Security Cloud VM Security Dynamic Threat Analysis (DTA) Container Vulnerability Scanning Aquasec offers a 14days trial to learn the container security / Automated DevSecOps. Use this link to get free trail  Sign In | Aqua (aquasec.com)   How to start with AquaSec? Once login into the portal click the nine dots in the left-side top > Aqua Hub  Then click the "Integrations" The Integration page has a lot of options to connect your container Platform Choosing your platform provides the required key to integrate. (follow the OEM documents ) The

how to Git the GitHub ?

  type of source code management? local repo remote repo architecture of scm? distributed  architecture ( all users will have a local repo in their local pc  and one as centrala  repo othe n cloud (github,GitLab, bitbucket ) how to install git in Linux ? redhat/cent os /aws linx yum install git -y ubuntu : apt-get install git -y how to configure the git profile? git config --global user.name "coss" git config --global user.email "[email protected]" how to create a git repository for a regular folder ? git init <-- it will create .git folder to track create/modify activity in the folder stages of git repo ? 3 stages  working area stage area local repository DB Git Status Terminology : untrack files : ( working area) to be committed (  staging area ) how to check stages? git status  how to add files from wthe orking area to staging area? git add  . or git add file1 how to commit (save) to git repo db ? git commit -m "first" how to check git repo commits and

My Life as Information security engineer Chapter 1: Tools

  Hi folks, here I am going to share the tools list that I am using in my daily life cycle. NMAP  Nmap (“Network Mapper”) is a free and open-source (license) utility for network discovery and security auditing. Basically, I will use it to discover the open ports and closed ports where I did Port Mapping in firewalls. We can use this in the local network as well as in the WAN network. Also with help of the NSE script, we do multiple things like vulnerability check, exploitation, etc., Ref: http://www.piratesshield.com/2017/11/nmap-network-mapper-securtiy-scanner.html CURL and WGET curl   is a tool to transfer data from or to a server, using one of the supported protocols (HTTP, HTTPS, FTP, FTPS, SCP, SFTP, TFTP, DICT, TELNET, LDAP or FILE). Normally using this tool to analyze the website headers when my web security device blocking some dynamic content websites and to create the Application signature in IPS. Wget   using to download files directly instead of opening and surfing the brow

What is IP Obfuscation ? How it's working ? how to use Cuteit tool ?

  What is IP  Obfuscation?     Which is a method to hide or convert a doted format IP address  (e.g. 192.168.192.2)   into an Integer or Hexadecimal value or Octal form by using some mathematical formula. It’s a kind of method to spoof the human eyes and web security services. dot format to Decimal Conversion   piratesshield.com 👉  [172.67.129.3] to translate (172 x256 3 )+(67×256 2 )+(129×256 1 )+(3×256 0 ) =  2890105091 Now you can use  https://2890105091  to access piratesshield.com This is one of the ways to do IP  Obfuscation.  The tool  ‘ Cuteit ‘ is  A simple python tool to help you to social engineer, bypass whitelisting firewalls, potentially break regex rules for command-line logging looking for IP addresses and obfuscate cleartext strings to C2 locations within the payload. HOW TO USE CUTEIT ? Download & Install Cuteit from the below link git :   git clone https://github.com/D4Vinci/Cuteit.git Direct link: https://github.com/D4Vinci/Cuteit/archive/master.zip usage: Cu

Telegram Scraper - a python tool to reckoning Telegram group member Details

      The Telegram-Scraper tool developed in python used to fetch all information about group members. This working on Telegram API. Follow the below procedures to install the tool. Telegram API Setup Go to http://my.telegram.org and log in Click on API development tools and fill in the required fields. put app name you want & select other in platform Example : copy “api_id” & “api_hash” after clicking create an app ( will be used in setup.py ) How To Install and Use $ pkg install -y git python$ git clone https://github.com/th3unkn0n/TeleGram-Scraper.git$ cd TeleGram-Scraper Application dependencies   $ python3 setup.py -i setup configuration file ( apiID, apiHASH ) $ python3 setup.py -c To Generate User Data (You will get OTP on Telegram) $ python3 scraper.py   (  members.csv is the default if you changed the name to use it ) Send Bulk SMS To Collected Data $ python3 smsbot.py members.csv   Update Tool $ python3 setup.py -u Installation Error : Mostly you will get the pip modu

Unzip compressed files using python codes

  Since my office blocked my admin privileges to install multiple software. By this Friday I did not get any support from the Desktop team to install the 7zip software and its urgent work.  Suddenly I got an idea, "Why can't use my Python"?  he he he......... Installed on my PC! So, immediately enter into StackOverflow, searched "how to unzip using python" and got the precious codes that I pasted below. Yup ! finally unzipped the P1r@ted study document, and kept it inside my "STUDY MATERIAL" folder as a hidden file. # importing the "compressed file" module import tarfile # open file file = tarfile.open('studymaterial.tar') # uncompress file file.extractall('./folderpath') file.close()