Posts

  • Aug 28, 2023

    ssh-baseline

    DevSec SSH Baseline - InSpec Profile

    This Compliance Profile requires InSpec for execution:

    $ git clone https://github.com/dev-sec/ssh-baseline
$ inspec exec ssh-baseline

    You can also execute the profile directly from Github:

    $ inspec exec https://github.com/dev-sec/ssh-baseline

    Tags: #ruby • inspec • audit

  • Aug 27, 2023

    android-material-stepper

    This library allows to use Material steppers inside Android applications.

    This library allows to use Material steppers inside Android applications.

    Quoting the documentation:

    Steppers display progress through a sequence by breaking it up into multiple logical and numbered steps.

    All of the code & features mentioned in Getting started and Advanced usage are showcased in the sample app. Moreover, you can find there other examples, e.g. how to persist state on rotation, display errors, change whether the user can go to the next step, etc. So please have a look!

    Tags: #java

  • Aug 27, 2023

    kitchenplan

    Kitchenplan is a small tool to fully automate the installation and configuration of an OSX workstation (or server for that matter) using Chef. But while doing so manually is not a trivial undertaking, Kitchenplan has abstracted away all the hard parts.

    Kitchenplan is a small tool to fully automate the installation and configuration of an OSX workstation (or server for that matter) using Chef. But while doing so manually is not a trivial undertaking, Kitchenplan has abstracted away all the hard parts.

    Tags: #ruby

  • Aug 27, 2023

    diagnostic-languageserver

    diagnostic language server integrate with linters

    General purpose Language Server that integrate with linter to support diagnostic features

    Tags: #typescript • coc • linter

  • Aug 26, 2023

    alexa_media_player

    This is a custom component to allow control of Amazon Alexa devices in Home Assistant using the unofficial Alexa API.

    This is a custom component to allow control of Amazon Alexa devices in Home Assistant using the unofficial Alexa API. Please note this mimics the Alexa app but Amazon may cut off access at anytime.

    Tags: #python • alexa • home-assistant

  • Aug 26, 2023

    devise_saml_authenticatable

    Devise SAML 2.0 authentication strategy

    Devise Saml Authenticatable is a Single-Sign-On authentication strategy for devise that relies on SAML. It uses [ruby-saml][] to handle all SAML-related stuff.

    Tags: #ruby

  • Aug 26, 2023

    simplelightbox

    Touch-friendly image lightbox for mobile and desktop

    Touch-friendly image lightbox for mobile and desktop

    Tags: #javascript • simplelightbox • jquery

  • Aug 25, 2023

    purple-team-attack-automation

    Praetorian’s public release of our Metasploit automation of MITRE ATT&CK™ TTPs

    At Praetorian, we were seeking a way to automatically emulate adversary tactics in order to evaluate detection and response capabilities. Our solution implements MITRE ATT&CK™ TTPs as Metasploit Framework post modules. As of this release, we’ve automated a little over 100 TTPs as modules.

    Metasploit’s advantage is its robust library, capability to interact with operating system APIs, and its flexible license. In addition, we’re able to emulate the features of other tools such as in-memory .NET execution via leveraging Metasploit’s execute_powershell functionality. This allows Blue Teams to ensure that their tools are alerting on the actual TTP behavior and not execution artifacts (such as encoded PowerShell).

    Our solution is built on top of the latest version of Metasploit as of 09Apr2019 (pulled from: https://github.com/rapid7/metasploit-framework). We’ve made minor modifications to Metasploit’s code base to enable some of the automation. Everything should work as intended if you’re already familiar with Metasploit. The magic happens after you establish a Meterpreter session and run a TTP as a post-exploitation module.

    We’re open sourcing our work because we believe in solving the cybersecurity problem. By giving Blue Teams more tools to emulate adversary behavior, we hope to improve their capabilities and reduce the still very high average dwell time.

    Tags: #ruby

  • Aug 25, 2023

    react-native-mapbox-gl

    A Mapbox GL react native module for creating custom maps

    This repository is no longer actively maintained.

    Continued development of react-native-mapbox-gl may be found in the community driven repository at https://github.com/react-native-mapbox-gl/maps. This new repository uses the latest versions of the Mapbox SDKs for iOS and Android, and contains a long range of improvements over the current one. We recommend you review the changelog for the new repository and transition to it.

    This repository will only accept PRs containing bug fixes. Any new feature development will happen in the new repository.

    Tags: #java • mapbox-gl • android

  • Aug 25, 2023

    cocoapods-binary

    integrate pods in form of prebuilt frameworks conveniently, reducing compile time

    You may wonder why CocoaPods doesn’t have a function to integrate libs in form of binaries, if there are dozens or hundreds of pods in your podfile and compile them for a great many times meaninglessly. Too many source code of libs slow down your compile and the response of IDE (e.g. code completion), and then reduce work efficiency, leaving us time to think about the meaning of life.

    This plugin implements this simple wish. Replace the source code in pod target with prebuilt frameworks.

    Why don’t use Carthage? While Carthage also integrates libs in form of frameworks, there several reasons to use CocoaPods with this plugin:

    • Pod is a good simple form to organize files, manage dependencies. (private or local pods)
    • Fast switch between source code and binary, or partial source code, partial binaries.
    • Some libs don’t support Carthage.

    Tags: #ruby • cocoapods-plugin • compile-time

subscribe via RSS