Posts

  • devise_saml_authenticatable

    Devise SAML 2.0 authentication strategy

    Devise Saml Authenticatable is a Single-Sign-On authentication strategy for devise that relies on SAML. It uses [ruby-saml][] to handle all SAML-related stuff.

    Tags: #ruby

  • simplelightbox

    Touch-friendly image lightbox for mobile and desktop

    Touch-friendly image lightbox for mobile and desktop

    Tags: #javascript • simplelightbox • jquery

  • purple-team-attack-automation

    Praetorian’s public release of our Metasploit automation of MITRE ATT&CK™ TTPs

    At Praetorian, we were seeking a way to automatically emulate adversary tactics in order to evaluate detection and response capabilities. Our solution implements MITRE ATT&CK™ TTPs as Metasploit Framework post modules. As of this release, we’ve automated a little over 100 TTPs as modules.

    Metasploit’s advantage is its robust library, capability to interact with operating system APIs, and its flexible license. In addition, we’re able to emulate the features of other tools such as in-memory .NET execution via leveraging Metasploit’s execute_powershell functionality. This allows Blue Teams to ensure that their tools are alerting on the actual TTP behavior and not execution artifacts (such as encoded PowerShell).

    Our solution is built on top of the latest version of Metasploit as of 09Apr2019 (pulled from: https://github.com/rapid7/metasploit-framework). We’ve made minor modifications to Metasploit’s code base to enable some of the automation. Everything should work as intended if you’re already familiar with Metasploit. The magic happens after you establish a Meterpreter session and run a TTP as a post-exploitation module.

    We’re open sourcing our work because we believe in solving the cybersecurity problem. By giving Blue Teams more tools to emulate adversary behavior, we hope to improve their capabilities and reduce the still very high average dwell time.

    Tags: #ruby

  • react-native-mapbox-gl

    A Mapbox GL react native module for creating custom maps

    This repository is no longer actively maintained.

    Continued development of react-native-mapbox-gl may be found in the community driven repository at https://github.com/react-native-mapbox-gl/maps. This new repository uses the latest versions of the Mapbox SDKs for iOS and Android, and contains a long range of improvements over the current one. We recommend you review the changelog for the new repository and transition to it.

    This repository will only accept PRs containing bug fixes. Any new feature development will happen in the new repository.

    Tags: #java • mapbox-gl • android

  • cocoapods-binary

    integrate pods in form of prebuilt frameworks conveniently, reducing compile time

    You may wonder why CocoaPods doesn’t have a function to integrate libs in form of binaries, if there are dozens or hundreds of pods in your podfile and compile them for a great many times meaninglessly. Too many source code of libs slow down your compile and the response of IDE (e.g. code completion), and then reduce work efficiency, leaving us time to think about the meaning of life.

    This plugin implements this simple wish. Replace the source code in pod target with prebuilt frameworks.

    Why don’t use Carthage? While Carthage also integrates libs in form of frameworks, there several reasons to use CocoaPods with this plugin:

    • Pod is a good simple form to organize files, manage dependencies. (private or local pods)
    • Fast switch between source code and binary, or partial source code, partial binaries.
    • Some libs don’t support Carthage.

    Tags: #ruby • cocoapods-plugin • compile-time

  • clippy

    Shape up your website with CSS clip-paths

    Live: https://bennettfeely.com/clippy

    Shape up your website with CSS clip-paths!

    Clippy is a tool for generating values for shape functions for the new and cool CSS clip-path property.

    Tags: #javascript

  • struts

    Mirror of Apache Struts

    More information can be found on the homepage. Please read the Security Guide, and the JavaDocs can be browsed. Questions related to the usage of Apache Struts should be posted to the user mailing list.

    Tags: #java • struts • web-framework

  • react-native-sqlite-storage

    SQLite3 Native Plugin for React Native for both Android (Classic and Native), iOS and Windows

    Foundation of this library is based on Chris Brody’s Cordova SQLite plugin.

    Features:

    1. iOS and Android supported via identical JavaScript API.
    2. Android in pure Java and Native modes
    3. SQL transactions
    4. JavaScript interface via plain callbacks or Promises.
    5. Pre-populated SQLite database import from application bundle and sandbox
    6. Windows supports callback API, identical to iOS and Android

    There are sample apps provided in test directory that can be used in with the AwesomeProject generated by React Native. All you have to do is to copy one of those files into your AwesomeProject replacing index.ios.js.

    Please let me know your projects that use these SQLite React Native modules. I will list them in the reference section. If there are any features that you think would benefit this library please post them.

    The library has been tested with React 16.2 (and earlier) and XCode 7,8,9 - it works fine out of the box without any need for tweaks or code changes. For XCode 7,8 vs. XCode 6 the only difference is that sqlite ios library name suffix is tbd instead of dylib.

    Version 3.2 is the first version compatible with RN 0.40.

    Tags: #java

  • jsonq

    A PHP query builder for JSON

    JsonQ is a simple, elegant PHP package to Query over any type of JSON Data. It’ll make your life easier by giving the flavour of an ORM-like query on your JSON.

    Tags: #php • json • json-data

  • django-rest-knox

    Authentication Module for django rest auth

    If you need to debug a test locally and if you have docker installed:

    simply run the ./docker-run-tests.sh script and it will run the test suite in every Python / Django versions.

    You could also simply run regular tox in the root folder as well, but that would make testing the matrix of Python / Django versions a bit more tricky.

    Tags: #python

subscribe via RSS