The Eye
1 like1,006 views
The document discusses the shortcomings of traditional monitoring and advocates for a test-driven monitoring approach called TheEye. It notes that traditional monitoring provides too much redundant information and that the key things to monitor are whether tests pass, response times are low enough, and the system is functioning properly. TheEye runs tests on a project or system at regular intervals to check functionality and collects the results to monitor health. Collectd is recommended for collecting additional system metrics when needed.
1 of 25
Downloaded 17 times
Recommended
Takipi
TakipiEudy Sekgota
油
This document introduces Eudy Sekgota, a software developer of 4 years, and provides information about the error monitoring tool Takipi. It explains that Takipi uses JVMTI to monitor Java applications without impacting performance, collects and analyzes data to recreate errors and diagnose their root causes. Some benefits of Takipi mentioned are helping teams or individuals quickly solve intermittent issues or problems in legacy code without wasting time replicating errors.Postmortem of a uwp xaml application development
Postmortem of a uwp xaml application developmentDavid Catuhe
油
This document provides tips and tricks for developing Universal Windows Platform (UWP) applications using C# and XAML, including techniques for adapting the user interface for different devices, persisting navigation state, improving performance, debugging issues, and deploying apps to the Microsoft Store. Specific strategies covered include using a reflow technique to rearrange UI elements, serializing navigation history with a stack of objects, avoiding reliance on NavigationCache, using debug stopwatches and profiling tools, adding exception handling, and integrating AppInsights for analytics and crash reporting.DefCamp 2013 - MSF Into The Worm Hole
DefCamp 2013 - MSF Into The Worm HoleDefCamp
油
This document provides an overview of using the Metasploit framework for penetration testing web applications. It discusses Metasploit modules like exploits, payloads, and listeners. It describes using direct exploits against hosts and browser exploits like heap spraying. It also covers using Metasploit for information gathering with Nmap and storing scan data in the Metasploit database. The document demonstrates a client-side attack against Internet Explorer using a binary payload and Immunity Debugger.Nmap2Nessus Presentation 際際滷s at Black Hat Asia Arsenal 2015
Nmap2Nessus Presentation 際際滷s at Black Hat Asia Arsenal 2015Keith Lee
油
This document describes nmap2nessus, a tool that takes Nmap scan results as input in XML format and uses them to configure and launch a targeted vulnerability scan with Nessus. It explains how nmap2nessus works by extracting open ports and live IPs from the Nmap file, modifying an existing Nessus policy, and starting a scan with that policy. The document also provides instructions for using nmap2nessus and includes a demo of it used against a Metasploitable2 virtual machine.Storyplayer
StoryplayerStuart Herbert
油
Storyplayer is a new open-source testing tool created by DataSift to help plug a gap in their layered testing strategy. It is designed to test services and systems using simple PHP scripts and stories. Storyplayer includes modules for vagrant, savageD, graphite and more to help set up test environments, monitor tests, and test non-functional requirements. It is available on GitHub and can help developers and testers share responsibility for testing different layers.Vorlon.js
Vorlon.jsDavid Catuhe
油
Vorlon.js is a remote web debugging tool that allows debugging of websites across browsers and platforms. It uses Node.js, Express.js, Socket.io and Passport.js. Vorlon.js comes with 11 default plugins for debugging tasks like inspecting the DOM, network requests, and unit testing. Developers can also create custom plugins and debug websites remotely on mobile devices through a simple script tag inclusion.In the desert, without a camel
In the desert, without a camelStephen Scaffidi
油
This is the tale of a DevOps journey through a wasteland where Perl is a third-class citizen. In the Hadoop world, anything that doesn't run on the JVM is not exactly, um... welcome. And while I love where I work these days, Perl is looked down upon, and often considered a tool of "last resort"...
However, despite the title of this talk, I have managed to sneak in quite a lot of Perl by means of a solid DevOps ethos and a solid philosophy of systems management from bare metal up through end-user applications. Turns out, Perl really *is* the best tool for the job in a *lot* of the situations I deal with from day-to-day.
In this talk you will learn about the fundamentals of my approach, along with details of the tools and techniques I have employed in the administration of the data warehouse infrastructure of the world's largest travel-review company. You will also learn how to make it *much* easier to use Perl and CPAN code in places other people would consider it infeasible, and fall back to more "universal" tools like awk and bash.Surviving Slashdot
Surviving Slashdotjohnbuckman
油
Technical presentation from 2005 about how to make your web site survive slashdot/digg style mega load.Docker intro
Docker introLenz Gschwendtner
油
This document discusses Docker containers and how they provide separation of concerns between operations and development teams. It covers how containers isolate applications from the underlying operating system and hardware. The document also demonstrates how to build a basic Docker container with a Dockerfile and run a container using Docker commands. Finally, it briefly mentions tools like Docker Compose, Serf, and HAProxy that can be used to manage containerized applications.Linuxconf 2011 parallel languages talk
Linuxconf 2011 parallel languages talkLenz Gschwendtner
油
The slides from my parallel programming talk at LCA 2011. It is an overview of several languages that offer parallel programming paradigms with a strong bias towards functional programminIwmn architecture
Iwmn architectureLenz Gschwendtner
油
The document discusses the evolution of a Catalyst application to use lighter weight components including removing the model layer and using Redis for sessions and RabbitMQ for the backend. It started as a standard Catalyst app and was stripped down over time, moving content to CouchDB, sessions to Redis, and the backend to RabbitMQ. Lessons learned included using plugins, choosing technologies like Redis, CouchDB and RabbitMQ, and getting a minimum viable product out quickly before refactoring.Scaling web apps_with_message_queues
Scaling web apps_with_message_queuesLenz Gschwendtner
油
slides from my talk at LinuxConf 2012 about the iWantMyName architecture and more in general how to scale a monolithic web app to a scalable app using a message queue.Url ux
Url uxLenz Gschwendtner
油
This document discusses best practices for designing URLs for websites, recommending that URLs be predictable, obvious, and easy for people to type in order to have a good user experience. Domain names should clearly indicate what the site is about rather than being obscure or misleading. Short, simple, and straightforward URLs are preferable to long or complicated ones.No sql
No sqlLenz Gschwendtner
油
NoSQL refers to non-relational databases that became popular alternatives to traditional SQL databases. SQL originated from research projects in the 1970s at IBM and Berkeley and saw commercial uptake in the 1980s by companies like Oracle and Tandem. SQL standards were established in the 1980s and 1990s, while open source SQL databases like MySQL and PostgreSQL emerged. The growth of web applications in the 2000s drove the development of NoSQL databases like MongoDB, Cassandra, and Redis to address the needs of sites with large, distributed datasets.Cloud architectures
Cloud architecturesLenz Gschwendtner
油
The document discusses moving applications from self-hosted data centers to cloud infrastructure which provides virtual resources on demand through APIs and automation. It notes that while traditionally financial and social media applications were hosted on-premises, moving to the cloud allows flexibility to try new things. It encourages the reader to experiment with cloud technologies and provides contact information for any questions.Mojolicious
MojoliciousLenz Gschwendtner
油
This document discusses Mojolicious, a lightweight web framework for Perl. It provides examples of using Mojolicious to quickly generate a new project skeleton, start a web server, and add routing and templates. The document also lists some advantages of Mojolicious like its small core dependencies, quick prototyping capabilities, and ability to scale from simple to more complex applications.Test & Tea : ITSEC testing, manual vs automated
Test & Tea : ITSEC testing, manual vs automatedZoltan Balazs
油
This document discusses the differences between manual and automated security testing. It provides examples of issues that automated scanners often cannot find, such as logical bugs, authentication bypasses, unknown parameters, and creative hacks. The conclusion recommends using automated tools for repetitive tasks but using human intelligence for more creative hacking problems in order to thoroughly test systems.Automate Everything! (No stress development/Tallinn)
Automate Everything! (No stress development/Tallinn)Arto Santala
油
Brief story about how to bring much happiness to live using modern technologies and some good engineering principles. To learn more, aim yourself to http://dev.solita.fi/ - or just decide to improve a bit today.Steamlining your puppet development workflow
Steamlining your puppet development workflowTomas Doran
油
The document discusses ways to streamline a Puppet development workflow including using revision control, running Puppet in noop or automatic mode, moving changes slowly through testing and using branches, reporting on changes, and implementing testing strategies like unit testing with rspec-puppet and integration testing with serverspec. It also recommends tools like Foreman, Norman, Puppetfile, and Jenkins to improve testing and deployment.Puppet Camp New York 2014: Streamlining Puppet Development Workflow 
Puppet Camp New York 2014: Streamlining Puppet Development Workflow Puppet
油
The document discusses ways to streamline a Puppet development workflow including using revision control, running Puppet in noop or automatic mode, moving changes slowly through testing and using branches, reporting on changes, and implementing testing strategies like unit testing with rspec-puppet and integration testing with serverspec. It also recommends tools like Foreman, Norman, Puppetfile, and Jenkins to improve testing and deployment.Cross-platform logging and analytics
Cross-platform logging and analyticsDrew Crawford
油
The document discusses logging and analytics for software products. It notes that only logging essential information is important to understand current issues based on past events. Effective logging requires balancing what to log with actually implementing the logging. The document proposes logging all events to a single, standardized format that can be queried across systems to gain insights that are otherwise difficult to obtain from separate logging mechanisms.OSMC 2011 | Distributed monitoring using NSClient++ by Michael Medin
OSMC 2011 | Distributed monitoring using NSClient++ by Michael MedinNETWAYS
油
Dezentralisiertes Monitoring ist h辰ufig eine Mischung aus verschiedenen L旦sungen und Protokollen. NSClient++ soll in Zukunft eine ganzheitliche L旦sung schaffen, ungeachtet davon, ob Windows, Linux oder Solaris genutzt wird oder die entsprechenden Ergebnisse aktiv oder passiv ermittelt werden. Deshalb wurde die Arbeit an einem Dezentralisierungsmechanismus aufgenommen mit dem man einzelne Kommandos versenden, Checkergebnisse empfangen und dar端ber hinaus auch Konfigurationselemente verteilen kann.
Der Vortrag wird eine kurze Einf端hrung in die neuen Konzepte geben und darauf aufbauend verschiedene M旦glichkeiten aufzeigen aus den einzelnen Komponenten eine verteiltes Monitoring Framework aufzubauen.Ui Testing with Ghost Inspector
Ui Testing with Ghost InspectorHarvard Web Working Group
油
Jay Luker will be presenting an introduction to Ghost Inspector, a cloud-based web UI testing service that takes some (some!) of the pain away from creating browser-based, web application tests. Think Selenium, but for projects that are short on the resources, infrastructure and/or coding expertise to confidently develop and manage a suite of fully automated, good-enough UI tests.
Jay is a Senior Software Engineer at Harvard DCE where he works on back-end applications and software for analytics data collection, deployment automation, and integration testing for the Extension Schools video processing and delivery system. Previously he has been an IT Specialist at the Smithsonian Astrophysics Data System, and a Software Developer at Ex Libris.
The basics of hacking and penetration testing 伎 伎 危濠骸 豺 ろ kenneth.s.kwon
The basics of hacking and penetration testing 伎 伎 危濠骸 豺 ろ kenneth.s.kwonKenneth Kwon
油
About the book: the basics of hacking and pernetration testing
蟲 豈朱 '伎 伎 危濠骸 豺ろ'襯 覦 襴.
Backtrack .Monitoring Servers, With a Little Help from my Bots
Monitoring Servers, With a Little Help from my BotsTakashi Yamanoue
油
This paper discusses a method of employing bots instead of people to monitor servers or server rooms. A bot is a remote controlled computer or a remote controlled program. A bot is usually a malicious program which is an element of a botnet. A botnet is used for doing malicious things such as spreading spam mails or doing DDoS Attacks. We have made bots and we are using bots for doing beneficial things such as monitoring a server instead of doing malicious things. We are monitoring a web server in our campus using a bot. This bot is tweeting whether the server is running or not periodically on the twitter. We are also monitoring a server room in our campus using another bot. This bot shows managers transition of the room temperature and others.Sumatra and git
Sumatra and gitMichele Mattioni
油
Sumatra is a System Management Tool to keep track of your simulation results. Now it has also git support.20120524 english lt2_pythontoolsfortesting
20120524 english lt2_pythontoolsfortestingKazuhiro Oinuma
油
This document discusses Python tools for testing, including py.test, tox, and TravisCI. It provides information about each tool: py.test is an improved unit testing library compared to nose, with readable test results, mocking features, and JUnit XML output; tox runs tests across multiple Python versions using virtualenv; and TravisCI is a continuous integration service that runs tests automatically on GitHub code commits for open source projects in various languages including Python. Examples of configuration files for tox and TravisCI are also included.Cooking a rabbit pie
Cooking a rabbit pieTomas Doran
油
This document discusses using AMQP and RabbitMQ for real-time system performance monitoring and job queueing. It describes key AMQP concepts like exchanges, queues, routing keys, and delivery modes. It then discusses how the speaker built a job queueing system called CatalystX::JobServer that uses these concepts and RabbitMQ. Demo examples are shown of using this system to queue and monitor the status of jobs. Potential next steps and other solutions like Gearman are also mentioned.It Sounded Good on Paper - Lessons Learned with Puppet
It Sounded Good on Paper - Lessons Learned with PuppetJeffery Smith
油
This talk is a 12 point guide on the things we did wrong during our journey with Puppet. We hope sharing helps people prevent the same mistakes in the future.Puppet Development Workflow
Puppet Development WorkflowJeffery Smith
油
A presentation given at PuppetCamp Chicago 2015 on the Puppet Development Workflow used at Grubhub. It walks through philosophy as well as process.More Related Content
Viewers also liked (8)
Docker intro
Docker introLenz Gschwendtner
油
This document discusses Docker containers and how they provide separation of concerns between operations and development teams. It covers how containers isolate applications from the underlying operating system and hardware. The document also demonstrates how to build a basic Docker container with a Dockerfile and run a container using Docker commands. Finally, it briefly mentions tools like Docker Compose, Serf, and HAProxy that can be used to manage containerized applications.Linuxconf 2011 parallel languages talk
Linuxconf 2011 parallel languages talkLenz Gschwendtner
油
The slides from my parallel programming talk at LCA 2011. It is an overview of several languages that offer parallel programming paradigms with a strong bias towards functional programminIwmn architecture
Iwmn architectureLenz Gschwendtner
油
The document discusses the evolution of a Catalyst application to use lighter weight components including removing the model layer and using Redis for sessions and RabbitMQ for the backend. It started as a standard Catalyst app and was stripped down over time, moving content to CouchDB, sessions to Redis, and the backend to RabbitMQ. Lessons learned included using plugins, choosing technologies like Redis, CouchDB and RabbitMQ, and getting a minimum viable product out quickly before refactoring.Scaling web apps_with_message_queues
Scaling web apps_with_message_queuesLenz Gschwendtner
油
slides from my talk at LinuxConf 2012 about the iWantMyName architecture and more in general how to scale a monolithic web app to a scalable app using a message queue.Url ux
Url uxLenz Gschwendtner
油
This document discusses best practices for designing URLs for websites, recommending that URLs be predictable, obvious, and easy for people to type in order to have a good user experience. Domain names should clearly indicate what the site is about rather than being obscure or misleading. Short, simple, and straightforward URLs are preferable to long or complicated ones.No sql
No sqlLenz Gschwendtner
油
NoSQL refers to non-relational databases that became popular alternatives to traditional SQL databases. SQL originated from research projects in the 1970s at IBM and Berkeley and saw commercial uptake in the 1980s by companies like Oracle and Tandem. SQL standards were established in the 1980s and 1990s, while open source SQL databases like MySQL and PostgreSQL emerged. The growth of web applications in the 2000s drove the development of NoSQL databases like MongoDB, Cassandra, and Redis to address the needs of sites with large, distributed datasets.Cloud architectures
Cloud architecturesLenz Gschwendtner
油
The document discusses moving applications from self-hosted data centers to cloud infrastructure which provides virtual resources on demand through APIs and automation. It notes that while traditionally financial and social media applications were hosted on-premises, moving to the cloud allows flexibility to try new things. It encourages the reader to experiment with cloud technologies and provides contact information for any questions.Mojolicious
MojoliciousLenz Gschwendtner
油
This document discusses Mojolicious, a lightweight web framework for Perl. It provides examples of using Mojolicious to quickly generate a new project skeleton, start a web server, and add routing and templates. The document also lists some advantages of Mojolicious like its small core dependencies, quick prototyping capabilities, and ability to scale from simple to more complex applications.Similar to The Eye (20)
Test & Tea : ITSEC testing, manual vs automated
Test & Tea : ITSEC testing, manual vs automatedZoltan Balazs
油
This document discusses the differences between manual and automated security testing. It provides examples of issues that automated scanners often cannot find, such as logical bugs, authentication bypasses, unknown parameters, and creative hacks. The conclusion recommends using automated tools for repetitive tasks but using human intelligence for more creative hacking problems in order to thoroughly test systems.Automate Everything! (No stress development/Tallinn)
Automate Everything! (No stress development/Tallinn)Arto Santala
油
Brief story about how to bring much happiness to live using modern technologies and some good engineering principles. To learn more, aim yourself to http://dev.solita.fi/ - or just decide to improve a bit today.Steamlining your puppet development workflow
Steamlining your puppet development workflowTomas Doran
油
The document discusses ways to streamline a Puppet development workflow including using revision control, running Puppet in noop or automatic mode, moving changes slowly through testing and using branches, reporting on changes, and implementing testing strategies like unit testing with rspec-puppet and integration testing with serverspec. It also recommends tools like Foreman, Norman, Puppetfile, and Jenkins to improve testing and deployment.Puppet Camp New York 2014: Streamlining Puppet Development Workflow
Puppet Camp New York 2014: Streamlining Puppet Development Workflow Puppet
油
The document discusses ways to streamline a Puppet development workflow including using revision control, running Puppet in noop or automatic mode, moving changes slowly through testing and using branches, reporting on changes, and implementing testing strategies like unit testing with rspec-puppet and integration testing with serverspec. It also recommends tools like Foreman, Norman, Puppetfile, and Jenkins to improve testing and deployment.Cross-platform logging and analytics
Cross-platform logging and analyticsDrew Crawford
油
The document discusses logging and analytics for software products. It notes that only logging essential information is important to understand current issues based on past events. Effective logging requires balancing what to log with actually implementing the logging. The document proposes logging all events to a single, standardized format that can be queried across systems to gain insights that are otherwise difficult to obtain from separate logging mechanisms.OSMC 2011 | Distributed monitoring using NSClient++ by Michael Medin
OSMC 2011 | Distributed monitoring using NSClient++ by Michael MedinNETWAYS
油
Dezentralisiertes Monitoring ist h辰ufig eine Mischung aus verschiedenen L旦sungen und Protokollen. NSClient++ soll in Zukunft eine ganzheitliche L旦sung schaffen, ungeachtet davon, ob Windows, Linux oder Solaris genutzt wird oder die entsprechenden Ergebnisse aktiv oder passiv ermittelt werden. Deshalb wurde die Arbeit an einem Dezentralisierungsmechanismus aufgenommen mit dem man einzelne Kommandos versenden, Checkergebnisse empfangen und dar端ber hinaus auch Konfigurationselemente verteilen kann.
Der Vortrag wird eine kurze Einf端hrung in die neuen Konzepte geben und darauf aufbauend verschiedene M旦glichkeiten aufzeigen aus den einzelnen Komponenten eine verteiltes Monitoring Framework aufzubauen.Ui Testing with Ghost Inspector
Ui Testing with Ghost InspectorHarvard Web Working Group
油
Jay Luker will be presenting an introduction to Ghost Inspector, a cloud-based web UI testing service that takes some (some!) of the pain away from creating browser-based, web application tests. Think Selenium, but for projects that are short on the resources, infrastructure and/or coding expertise to confidently develop and manage a suite of fully automated, good-enough UI tests.
Jay is a Senior Software Engineer at Harvard DCE where he works on back-end applications and software for analytics data collection, deployment automation, and integration testing for the Extension Schools video processing and delivery system. Previously he has been an IT Specialist at the Smithsonian Astrophysics Data System, and a Software Developer at Ex Libris.
The basics of hacking and penetration testing 伎 伎 危濠骸 豺 ろ kenneth.s.kwon
The basics of hacking and penetration testing 伎 伎 危濠骸 豺 ろ kenneth.s.kwonKenneth Kwon
油
About the book: the basics of hacking and pernetration testing
蟲 豈朱 '伎 伎 危濠骸 豺ろ'襯 覦 襴.
Backtrack .Monitoring Servers, With a Little Help from my Bots
Monitoring Servers, With a Little Help from my BotsTakashi Yamanoue
油
This paper discusses a method of employing bots instead of people to monitor servers or server rooms. A bot is a remote controlled computer or a remote controlled program. A bot is usually a malicious program which is an element of a botnet. A botnet is used for doing malicious things such as spreading spam mails or doing DDoS Attacks. We have made bots and we are using bots for doing beneficial things such as monitoring a server instead of doing malicious things. We are monitoring a web server in our campus using a bot. This bot is tweeting whether the server is running or not periodically on the twitter. We are also monitoring a server room in our campus using another bot. This bot shows managers transition of the room temperature and others.Sumatra and git
Sumatra and gitMichele Mattioni
油
Sumatra is a System Management Tool to keep track of your simulation results. Now it has also git support.20120524 english lt2_pythontoolsfortesting
20120524 english lt2_pythontoolsfortestingKazuhiro Oinuma
油
This document discusses Python tools for testing, including py.test, tox, and TravisCI. It provides information about each tool: py.test is an improved unit testing library compared to nose, with readable test results, mocking features, and JUnit XML output; tox runs tests across multiple Python versions using virtualenv; and TravisCI is a continuous integration service that runs tests automatically on GitHub code commits for open source projects in various languages including Python. Examples of configuration files for tox and TravisCI are also included.Cooking a rabbit pie
Cooking a rabbit pieTomas Doran
油
This document discusses using AMQP and RabbitMQ for real-time system performance monitoring and job queueing. It describes key AMQP concepts like exchanges, queues, routing keys, and delivery modes. It then discusses how the speaker built a job queueing system called CatalystX::JobServer that uses these concepts and RabbitMQ. Demo examples are shown of using this system to queue and monitor the status of jobs. Potential next steps and other solutions like Gearman are also mentioned.It Sounded Good on Paper - Lessons Learned with Puppet
It Sounded Good on Paper - Lessons Learned with PuppetJeffery Smith
油
This talk is a 12 point guide on the things we did wrong during our journey with Puppet. We hope sharing helps people prevent the same mistakes in the future.Puppet Development Workflow
Puppet Development WorkflowJeffery Smith
油
A presentation given at PuppetCamp Chicago 2015 on the Puppet Development Workflow used at Grubhub. It walks through philosophy as well as process.Generating unit tests based on user logs
Generating unit tests based on user logsRick Wicker
油
Developing without automated testing is hard and risky. Making legacy code testable is hard. Try to improve your logging, add a data layer and see if you can drive testing from user behavior.Django production
Django productionpythonsd
油
This was a presentation given at San Diego Python's Django Day:
http://www.meetup.com/pythonsd/events/95751792/
https://github.com/pythonsd/learning-djangoDebugging Complex Systems - Erlang Factory SF 2015
Debugging Complex Systems - Erlang Factory SF 2015lpgauth
油
Debugging complex systems can be difficult. Luckily, the Erlang ecosystem is full of tools to help you out. With the right mindset and the right tools, debugging complex Erlang systems can be easy. In this talk, I'll share the debugging methodology I've developed over the years.Puppet Camp NYC 2014: Build a Modern Infrastructure in 45 min!
Puppet Camp NYC 2014: Build a Modern Infrastructure in 45 min!Puppet
油
The document describes how to build a modern infrastructure using Puppet modules. It discusses setting up MCollective for orchestration, Sensu for monitoring, Logstash for logging, and Jenkins for continuous integration. A Puppet module called moderninfra is demonstrated that defines the architecture and installs/configures all of the required components including RabbitMQ, Elasticsearch, and Kibana. The full infrastructure can then be built out across multiple nodes by writing Hiera data and node definitions.BSides Lisbon 2013 - All your sites belong to Burp
BSides Lisbon 2013 - All your sites belong to BurpTiago Mendo
油
This talk is going to be all about Burp. I will explain why is such a great tool and how it compares with similar ones.
Its going to have a quick walkthrough of its main features, but the juicy part is going to be about how to fully explore its main tools, such as the scanner, intruder and sequencer, to increase the number and type of vulnerabilities found.
In addition, I will provide an overview of the Burp Extender Interface and how to easily and quickly take advantage of extensions to increase its awesomeness. I will show how easy is for an pentester to translate an idea to a extension and (I hope) publicly release one plugin to further help pentesters.
The talks objective is to increase your efficiency while using Burp, either by taking advantage of its excellent tools or by adding that feature that really need.
Presented at BSides Lisbon at 04/10/13 (http://bsideslisbon.org)Why internal pen tests are still fun
Why internal pen tests are still funpyschedelicsupernova
油
This document discusses techniques for internal penetration testing. It begins by explaining why internal pen tests are more interesting than external or web app tests due to the ability to gain shells on internal systems. It then provides tips for easy exploits such as exploiting weak passwords, lack of patching, and improper access controls to gain initial access. Further tips include using tools like Responder to capture credentials, using a USB rubber ducky to quickly gain access when a user is logged in, and techniques for safely dumping passwords without antivirus detection. The document concludes by discussing how to escalate privileges to domain admin, loot sensitive data from file shares and databases, and scripts to automate post-exploitation tasks. Mitigations are briefly discussed as well as tipsMore from Lenz Gschwendtner (6)
realising ideas
realising ideasLenz Gschwendtner
油
the slides from my ignite talk at ignite wellington. all about mind hacks to get ideas into reality. will link the video here too once it is online.MPI, Erlang and the web
MPI, Erlang and the webLenz Gschwendtner
油
slides from my talk at LCA2010 in Wellington about how to scale web services and why parallel programming and open standards matterRabbitMQ + CouchDB = Awesome
RabbitMQ + CouchDB = AwesomeLenz Gschwendtner
油
This document proposes a system using RabbitMQ and CouchDB to provide a scalable and flexible backend that can handle various frontends. RabbitMQ is used for messaging between daemons, while CouchDB is used to define and manage workflows and store persistent messages to allow asynchronous callbacks to continue workflows. The system addresses challenges of scaling, different frontends, cloud hosting, maintenance, asynchronous tasks, and message correlation.RabbitMQ for Perl mongers
RabbitMQ for Perl mongersLenz Gschwendtner
油
A talk I held at perl mongers Wellington about RabbitMQ and Net::AMQP. A brief introduction to RabbitMQ and some basic code samples on how to use it from perl.RabbitMQ
RabbitMQLenz Gschwendtner
油
The document introduces RabbitMQ, an open source message broker that implements the Advanced Message Queuing Protocol (AMQP). It discusses why AMQP is an open industry standard that is not language dependent and supported by many major companies. It then provides an overview of messaging concepts like queues, exchanges, routing and pub/sub using RabbitMQ examples. It also mentions some advanced features of AMQP like authentication, load balancing and persistent/non-persistent messages. Finally, it provides information on how to get started with RabbitMQ.Umleitung: a tiny mochiweb/CouchDB app
Umleitung: a tiny mochiweb/CouchDB appLenz Gschwendtner
油
The slides from erlounge Wellington 02-2009. Umleintung is a tiny HTTP redirect daemon based on mochiweb and CouchDB.
It describes how to bootstrap a mochiweb application and integrate CouchDB.Recently uploaded (20)
Webinar: LF Energy GEISA: Addressing edge interoperability at the meter
Webinar: LF Energy GEISA: Addressing edge interoperability at the meterDanBrown980551
油
This webinar will introduce the Grid Edge Security and Interoperability Alliance, or GEISA, an effort within LF Energy to address application interoperability at the very edge of the utility network: meters and other distribution automation devices. Over the last decade platform manufacturers have introduced the ability to run applications on electricity meters and other edge devices. Unfortunately, while many of these efforts have been built on Linux, they havent been interoperable. APIs and execution environment have varied from one manufacturer to the next making it impossible for utilities to obtain applications that they can run across a fleet of different devices. For utilities that want to minimize their supply chain risk by obtaining equipment from multiple suppliers, they are forced to run and maintain multiple separate management systems. Applications available for one device may need to be ported to run on another, or they may not be available at all.
GEISA addresses this by creating a vendor neutral specification for utility edge computing environments. This webinar will discuss why GEISA is important to utilities, the specific issues GEISA will solve and the new opportunities it creates for utilities, platform vendors, and application vendors. Agentic AI: The 2025 Next-Gen Automation Guide
Agentic AI: The 2025 Next-Gen Automation GuideThoughtminds
油
Introduction to Agentic AI: Explains how it differs from traditional automation and its ability to make independent decisions.
Comparison with Generative AI: A structured comparison between Generative AI (content creation) and Agentic AI (autonomous action-taking).
Technical Breakdown: Covers core components such as LLMs, reinforcement learning, and cloud infrastructure that power Agentic AI.
Real-World Use Cases (2025 & Beyond): Examines how Agentic AI is transforming industries like insurance, healthcare, retail, finance, and cybersecurity.
Business Impact & ROI: Discusses case studies from Unilever, FedEx, and more, showcasing cost savings and operational efficiency improvements.
Challenges & Risks: Highlights bias, security threats, regulatory compliance, and workforce reskilling as critical challenges in AI adoption.
5-Step Implementation Strategy: A practical roadmap to help organizations integrate Agentic AI seamlessly.
Future Predictions (2025-2030): Forecasts on AI-driven workforce evolution, industry disruptions, and the rise of Quantum AI.Not a Kubernetes fan? The state of PaaS in 2025
Not a Kubernetes fan? The state of PaaS in 2025Anthony Dahanne
油
Kubernetes won the containers orchestration war. But has it made deploying your apps easier?
Let's explore some of Kubernetes extensive app developer tooling, but mainly what the PaaS space looks like in 2025; 18 years after Heroku made it popular.
Is Heroku still around? What about Cloud Foundry?
And what are those new comers (fly.io, railway, porter.sh, etc.) worth?
Did the Cloud giants replace them all?DealBook of Ukraine: 2025 edition | AVentures Capital
DealBook of Ukraine: 2025 edition | AVentures CapitalYevgen Sysoyev
油
The DealBook is our annual overview of the Ukrainian tech investment industry. This edition comprehensively covers the full year 2024 and the first deals of 2025. Leadership u automatizaciji: RPA prie iz prakse!
Leadership u automatizaciji: RPA prie iz prakse!UiPathCommunity
油
Dobrodo邸li na "AI Powered Automation Leadership Talks", online dogaaj koji okuplja senior lidere i menad転ere iz razliitih industrija kako bi podelili svoja iskustva, izazove i strategije u oblasti RPA (Robotic Process Automation). Ovaj dogaaj pru転a priliku da zavirite u nain razmi邸ljanja ljudi koji donose kljune odluke u automatizaciji i liderstvu.
Kroz panel diskusiju sa tri izuzetna strunjaka, istra転iemo:
Kako uspe邸no zapoeti i skalirati RPA projekte u organizacijama.
Koji su najvei izazovi u implementaciji RPA-a i kako ih prevazii.
Na koje naine automatizacija menja radne procese i poma転e timovima da ostvare vi邸e.
Bez obzira na va邸e iskustvo sa UiPath-om ili RPA uop邸te, ovaj dogaaj je osmi邸ljen kako bi bio koristan svima od menad転era do tehnikih lidera, i svima koji 転ele da unaprede svoje razumevanje automatizacije.
Pridru転ite nam se i iskoristite ovu jedinstvenu priliku da nauite od onih koji vode automatizaciju u svojim organizacijama. Pripremite svoja pitanja i inspiraciju za sledee korake u va邸oj RPA strategiji!UiPath Automation Developer Associate Training Series 2025 - Session 1
UiPath Automation Developer Associate Training Series 2025 - Session 1DianaGray10
油
Welcome to UiPath Automation Developer Associate Training Series 2025 - Session 1.
In this session, we will cover the following topics:
Introduction to RPA & UiPath Studio
Overview of RPA and its applications
Introduction to UiPath Studio
Variables & Data Types
Control Flows
You are requested to finish the following self-paced training for this session:
Variables, Constants and Arguments in Studio 2 modules - 1h 30m - https://academy.uipath.com/courses/variables-constants-and-arguments-in-studio
Control Flow in Studio 2 modules - 2h 15m - https:/academy.uipath.com/courses/control-flow-in-studio
鏝 For any questions you may have, please use the dedicated Forum thread. You can tag the hosts and mentors directly and they will reply as soon as possible. Dev Dives: Unlock the future of automation with UiPath Agent Builder
Dev Dives: Unlock the future of automation with UiPath Agent BuilderUiPathCommunity
油
This webinar will offer you a first look at the powerful capabilities of UiPath Agent Builder, designed to streamline your automation processes and enhance your workflow efficiency.
During the session, you will:
- Discover how to build agents with low-code experience, making it accessible for both developers and business users.
- Learn how to leverage automations and activities as tools within your agents, enabling them to handle complex and dynamic workflows.
- Gain insights into the AI Trust Layer, which provides robust management and monitoring capabilities, ensuring trust and transparency in your automation processes.
- See how agents can be deployed and integrated with your existing UiPath cloud and Studio environments.
Speaker:
Zach Eslami, Sr. Manager, Product Management Director, UiPath
Register for our upcoming Dev Dives March session:
Unleash the power of macOS Automation with UiPath
AMER: https://bit.ly/Dev_Dives_AMER_March
EMEA & APJ:https://bit.ly/Dev_Dives_EMEA_APJ_March
This session was streamed live on February 27, 2025, 15:00 GMT.
Check out future Dev Dives 2025 sessions at:
https://bit.ly/Dev_Dives_2025
Understanding & Utilizing SharePoint Advanced Management
Understanding & Utilizing SharePoint Advanced ManagementDrew Madelung
油
Drew Madelung is a Cloud Solutions Architect and a Microsoft MVP for Office Apps and Services. He helps organizations realize what is possible with Microsoft 365 & Azure, onboard them in a secure and compliant way, and drive sustained adoption for those solutions. He is experienced in a range of technologies but specializes in the collaboration and teamwork workspaces such as Microsoft Teams, SharePoint, and OneDrive. He has helped deploy Microsoft 365 to multiple global companies while rolling out modern information protection and information governance technologies. He has been doing Microsoft consulting for 10+ years with a strength in security & compliance solutions.Mastering ChatGPT & LLMs for Practical Applications: Tips, Tricks, and Use Cases
Mastering ChatGPT & LLMs for Practical Applications: Tips, Tricks, and Use CasesSanjay Willie
油
Our latest session with Astiostech covered how to unlock the full potential of ChatGPT and LLMs for real-world use!
Key Takeaways:
Effective Prompting: Crafting context-specific, high-quality prompts for optimal AI responses.
Advanced ChatGPT Features: Managing system prompts, conversation memory, and file uploads.
Optimizing AI Outputs: Refining responses, handling large texts, and knowing when fine-tuning is needed.
Competitive Insights: Exploring how ChatGPT compares with other AI tools.
Business & Content Use Cases: From summarization to SEO, sales, and audience targeting.
The session provided hands-on strategies to make AI a powerful tool for content creation, decision-making, and business growth.
Are you using AI effectively in your workflow? Lets discuss how it can improve efficiency and creativity!
#AI #ChatGPT #PromptEngineering #ArtificialIntelligence #LLM #Productivity #AstiostechKickstart Your QA: An Introduction to Automated Regression Testing Tools
Kickstart Your QA: An Introduction to Automated Regression Testing ToolsShubham Joshi
油
For teams eager to elevate their quality assurance practices, this guide offers an introductory look at automated regression testing tools. In the realm of software development, regression tests are vital to ensuring that recent code changes dont inadvertently break existing functionality. This article demystifies how automated regression testing tools function and why theyre indispensable for maintaining software quality. It covers the basics of setting up automated tests, integrating these tests into your CI/CD pipelines, and choosing the right tool to match your projects needs. With clear explanations and actionable insights, youll discover how these tools help reduce manual testing burdens and catch bugs early. The guide also highlights common challenges beginners face and offers practical solutions to overcome them. Whether youre a QA professional or a developer stepping into the world of test automation, this resource will help you kickstart your journey toward more reliable, efficient, and scalable testing practices.
2025-02-27 Tech & Play_ Fun, UX, and Community.pdf
2025-02-27 Tech & Play_ Fun, UX, and Community.pdfkatalinjordans1
油
2025-02-27 Tech & Play_ Fun, UX, and Community.pdf
Bedrock Data Automation (Preview): Simplifying Unstructured Data Processing
Bedrock Data Automation (Preview): Simplifying Unstructured Data ProcessingZilliz
油
Bedrock Data Automation (BDA) is a cloud-based service that simplifies the process of extracting valuable insights from unstructured contentsuch as documents, images, video, and audio. Come learn how BDA leverages generative AI to automate the transformation of multi-modal data into structured formats, enabling developers to build applications and automate complex workflows with greater speed and accuracy.TrustArc Webinar: State of State Privacy Laws
TrustArc Webinar: State of State Privacy LawsTrustArc
油
The U.S. data privacy landscape is rapidly proliferating, with 20 states enacting comprehensive privacy laws as of November 2024. These laws cover consumer rights, data collection and use including for sensitive data, data security, transparency, and various enforcement mechanisms and penalties for non-compliance.
Navigating this patchwork of state-level laws is crucial for businesses to ensure compliance and requires a combination of strategic planning, operational adjustments, and technology to be proactive.
Join leading experts from TrustArc, the Future of Privacy Forum, and Venable for an insightful webinar exploring the evolution of state data privacy laws and practical strategies to maintain compliance in 2025.
This webinar will review:
- A comprehensive overview of each states privacy regulations and the latest updates
- Practical considerations to help your business achieve regulatory compliance across multiple states
- Actionable insights to future-proof your business for 2025What is FinTech A Complete Guide to Financial Technology.pdf
What is FinTech A Complete Guide to Financial Technology.pdf Yodaplus Technologies Private Limited
油
It is an in-depth exploration of how technology is transforming the financial sector. Covering the evolution of FinTech from credit cards to AI-driven banking, this guide explains key innovations such as blockchain, DeFi, AI-powered assistants, and central bank digital currencies (CBDCs). Learn how FinTech is enhancing banking, lending, and payments through automation, data analytics, and decentralized solutions. Whether you're a financial professional or just curious about the future of digital finance, this guide offers valuable insights into the rapidly evolving FinTech landscape.2025-02-24 - AWS meetup - Zilliz presentation.pdf
2025-02-24 - AWS meetup - Zilliz presentation.pdfIvan Tang
油
Zilliz's presentation in AWS x Apache Doris meetup on 24th Feb 2025 in Singapore.
In this presentation, I shared a live demo on how you can outsource thinking and reasoning to Amazon Nova for generating a research report on any topic.
Code repo for live demo can be found here: https://github.com/zilliztech/deep-searcher
I've also shared about the hard tradeoffs you need to make when choosing vector indexes and lastly my top 5 favourite features of Zilliz Cloud.16 KALALU鏝媜ご垂鏝乞 APARAMAHASAHASRA SIMHAMAHANKALKIADIPARASAKTIBH...
16 KALALU鏝媜ご垂鏝乞 APARAMAHASAHASRA SIMHAMAHANKALKIADIPARASAKTIBH...IT Industry
油
鏝咋Ωご鏝乞瑞ヰ媜 BHAGWAN SRI RAMA SIMHA OMKARAM SRI SRI KING VISNU KALKI SRI KRISNA PARAMATMA SRI SRI KING VISNU SARAT KRISNA PARAMATMA SRI SRI KING ADISIMHA APARAMAHASAHASRA SAHASRASAMASTA SAHASRA SAMASTA APARAMAHASAHASRA BHARGAVA SIMHA TRINETRA APARAMAHASAHASRA SIMHAMAHANKALI ADIPARASAKTI KVADIPARASAKTI ANEKASAHASRA MAHA INFINITY SIMHA SAHASRA AVATARAMULU SRI SRI KING VISNU SUPREME GODS HEADS KING VISNU SUPREME ALFAONKA SAHASRA SAMASTA APARAMAHASAHASRA BHARGAVA SIMHA TRINETRA APARAMAHASAHASRA SIMHAMAHANKALI ADIPARASAKTI KVADIPARASAKTI VAARE SRI SRI KING VISNU KAVERI VEERA BHARAT BHUSHAN MR.KALKIKINGSUPREMEGODSHEADS MEGA KALKI ROBO ALIENS KING SUPREME GODS HEADS KING ALFA SUPREMO 16 KALALU !! 媜ヰ瑞呉鏝ごΩ咋鏝Supercharge Your Career with UiPath Certifications
Supercharge Your Career with UiPath CertificationsDianaGray10
油
Join us on February 25th as we discuss how you can supercharge your career with the updated 2025 UiPath Certifications.
Diana Gray, UiPath Senior Community Marketing Manager, Americas, will walk us through:
-- Workforce Trends
-- Value of UiPath Certifications
-- Certification Program
-- Steps to Earning a CertificateWhat is FinTech A Complete Guide to Financial Technology.pdf
What is FinTech A Complete Guide to Financial Technology.pdf Yodaplus Technologies Private Limited
油
The Eye
- 1. TheEye
- 4. lots of checks lots of noti鍖es lots of effort to set up
- 5. lots of redundant bullshit
- 7. all I want to know is ...
- 8. is that beast working?
- 9. test driven monitoring FTW
- 10. write tests for a project consistency and functionality and ... run those tests every n minutes track the outcome
- 11. i am not interested if memory is up 1GB i am not interested if network traf鍖c is lower or higher i am not interested if CPU is maxed out
- 12. as long as ... the tests pass the response times are low enough the beast is working and can be used
- 13. and if things go wrong?
- 15. _then_ we need host infos pretty pictures as much info we can get about everything
- 16. but _only_ then!
- 18. TheEye
- 19. use Test::More tests => 4; use Test::WWW::Mechanize; my $mech = Test::WWW::Mechanize->new; $mech->get_ok('http://github.com'); $mech->base_is('http://github.com'); $mech->title_is("Secure source..."); $mech->content_contains("git reposi...");
- 21. easy!
- 22. the rest?
- 23. collectd!
- 24. links http://github.com/norbu09/ TheEye http://collectd.org/
- 25. credits Lord of the Rings (鍖lm by Peter Jackson) http://www.鍖ickr.com/photos/pneumatic_transport/ http://www.鍖ickr.com/photos/puppydogbites/