Posts

  • Nov 16, 2024

    gitless

    A simple version control system built on top of Git

    Binary releases for macOS and Linux are available from the Gitless website.

    If you’ve downloaded a binary release of Gitless everything is contained in the gl binary, so to install simply do:

    $ cp path-to-downloaded-gl-binary /usr/local/bin/gl

    You can put the binary in other locations as well, just be sure to update your PATH.

    If for some reason this doesn’t work (maybe you are running an old version of your OS?), try one of the other options (installing from source or via the Python Package Index).

    Tags: #python • version-control • git

  • Nov 15, 2024

    aad-sso-wordpress

    Single Sign-on with Azure Active Directory (for WordPress)

    A WordPress plugin that allows organizations to use their Microsoft Entra ID (formerly known as Azure Active Directory) user accounts to sign in to WordPress. Organizations with Office 365 already have Microsoft Entra ID (Microsoft Entra ID) and can use this plugin for all of their users.

    • Microsoft Entra ID group membership can be used to determine access and role.
    • New users can be registered on-the-fly based on their Microsoft Entra ID profile.
    • Can always fall back to regular username and password login.

    This is a work in progress, please feel free to contact me for help. This plugin is provided as-is, with no guarantees or assurances.

    In the typical flow:

    1. User attempts to log in to the blog. At the sign in page, they are given a link to sign in with their Microsoft Entra ID work or school account (e.g. a Microsoft 365 account).
    2. After signing in, the user is redirected back to the blog with an authorization code, which the plugin exchanges for a ID token, containing a minimal set of claims about the signed in user, and an access token, which can be used to query Microsoft Entra ID for additional details about the user.
    3. The plugin uses the claims in the ID token to attempt to find a WordPress user with an email address or login name that matches the Microsoft Entra ID user.
    4. If one is found, the user is authenticated in WordPress as that user account. If one is not found, the WordPress user will (optionally) be auto-provisioned on-the-fly.
    5. (Optional) Membership to certain groups in Microsoft Entra ID can be mapped to roles in WordPress, and group membership can be used to restrict access.

    Tags: #php • azure-active-directory • wordpress-plugin

  • Nov 15, 2024

    PHPMatrix

    PHP Class for handling Matrices

    • power() function
    • Decomposition
      • Cholesky Decomposition
      • EigenValue Decomposition
        • EigenValues
        • EigenVectors

    Tags: #php

  • Nov 14, 2024

    API-fuzzer

    API Fuzzer which allows to fuzz request attributes using common pentesting techniques and lists vulnerabilities

    API_Fuzzer gem accepts a API request as input and returns vulnerabilities possible in the API. Following are the main check involved in API_Fuzzer gem

    • Cross-site scripting vulnerability
    • SQL injection
    • Blind SQL injection
    • XML External entity vulnerability
    • IDOR (in specific cases)
    • API Rate Limiting
    • Open redirect vulnerabilities
    • Information Disclosure flaws
    • Info leakage through headers
    • Cross-site request forgery vulnerability

    Tags: #ruby • gem • ruby-gem

  • Nov 14, 2024

    gotools

    Plugin for Ghidra to assist reversing Golang binaries

    1. Download the release for your Ghidra version
    2. Copy ZIP to $GHIDRA_DIR/Extensions/Ghidra/
    3. Start Ghidra, File > Install Extensions, check the box next to gotools
    4. Restart Ghidra

    Tags: #java • ghidra • golang

  • Nov 13, 2024

    pacbot

    PacBot (Policy as Code Bot)

    Policy as Code Bot (PacBot) is a platform for continuous compliance monitoring, compliance reporting and security automation for the cloud. In PacBot, security and compliance policies are implemented as code. All resources discovered by PacBot are evaluated against these policies to gauge policy conformance. The PacBot auto-fix framework provides the ability to automatically respond to policy violations by taking predefined actions. PacBot packs in powerful visualization features, giving a simplified view of compliance and making it easy to analyze and remediate policy violations. PacBot is more than a tool to manage cloud misconfiguration, it is a generic platform that can be used to do continuous compliance monitoring and reporting for any domain.

    Tags: #java • cloud-security • security

  • Nov 13, 2024

    stimulus_reflex

    Build reactive applications with the Rails tooling you already know and love.

    StimulusReflex eliminates the complexity imposed by full-stack frontend frameworks. And, it’s fast.

    It works seamlessly with the Rails tooling you already know and love.

    Our goal is to help small teams do big things with familiar tools.

    This project strives to live up to the vision outlined in The Rails Doctrine.

    Tags: #ruby • stimulus • reactive

  • Nov 13, 2024

    neomodel

    An Object Graph Mapper (OGM) for the Neo4j graph database.

    For neomodel releases 5.x :

    • Python 3.8+
    • Neo4j 5.x, 4.4 (LTS)

    For neomodel releases 4.x :

    • Python 3.7 -> 3.10
    • Neo4j 4.x (including 4.4 LTS for neomodel version 4.0.10)

    Tags: #python • neo4j • ogm

  • Nov 12, 2024

    kubeinvaders

    Gamified Chaos Engineering Tool for Kubernetes

    Gamified Chaos Engineering Tool for K8s

    This project is part of landscape of Cloud Native Computing Foudation in the Observability and Analysis - Chaos Engineering section.

    Backed by the teams at platformengineering.it and devopstribe.it, which provides enterprise-grade features and certified resilience services for your Kubernetes infrastructure.

    Here are the slides from the Chaos Engineering speech I prepared for FOSDEM 2023. Unfortunately, I could not be present at my talk, but I would still like to share them with the community.

    Tags: #javascript • chaos • kubernetes

  • Nov 12, 2024

    croon

    PHP Crontab

    Croon是一个PHP版本的CronTab实现

    之前也做过一个类似的实现php-crontab，Croon与之不同的是：使用进程管理方式Fork工作进程；有友好的日志模块；加入事件驱动；更佳规范和稳定

    Tags: #php

subscribe via RSS