Categories
Uncategorized

keycloak on k8s

https://hub.helm.sh/charts/codecentric/keycloak https://github.com/helm/charts/tree/master/stable/keycloak https://www.youtube.com/watch?v=A_BYZ7hHWXE https://dev.to/techworld_with_nana/how-to-setup-a-keycloak-gatekeeper-to-secure-the-services-in-your-kubernetes-cluster-5d2d https://www.youtube.com/watch?v=u948CURLDJA&feature=youtu.be

Categories
Uncategorized

RBL – Balcklist resources

https://www.adampalmer.me/iodigitalsec/2014/11/22/dns-black-list-rbl-checking-in-python/ https://0xbharath.github.io/python-network-programming/protocols/dns/index.html http://www.dnspython.org/docs/1.16.0/ https://www.spamhaus.org/faq/section/DNSBL%20Usage#366

Categories
Uncategorized

Insight into how Cloud Based Companies build their Products

There was a nice article on digital ocean about technical debt. The meat of the article included inisight into the architecture and workings of a cloud based vendor. You can read the article about the 15000 db connections to 100 on digitalocean’s blog The architecture looked like the image below in the end:

Categories
Uncategorized

Free Port forwarding/Tunneling Services

Public URL’s for exposing your webserver / free port forwarding https://ngrok.com/ https://portmap.io/ https://localtunnel.github.io/www/ http://pagekite.net/ These are also apparently tunneling services frequently used by attackers to evade defences. via @pmelson

Categories
Uncategorized

Allowing unverified HTTP Post’s by Elastalert

I am using Praeco as a frontend for the Elastalert API which relies on Elastalert. The problem I faced was that sending unverified requests failed, as elastalert didn’t allow verfiy=False. I searched the Elastalert code and found the place the request is being made, it is in alerts.py file, the class HTTPPostAlerter. I changed: response […]