Casey Mullineaux

Sign in Subscribe

Latest

Infrastructure as code with Azure DevOps - Part 3: Creating a build pipeline

Infrastructure as code with Azure DevOps - Part 3: Creating a build pipeline

A build pipeline is typically used during software development to “build” the application from source code. In basic terms, this means taking the source code, running it through a compiler and producing an artifact. For example, if you take some C# source code and run it through the .NET compiler,

Infrastructure as code with Azure DevOps - Part 2: Source Control

Infrastructure as code with Azure DevOps - Part 2: Source Control

In Part 1 we setup a new Azure DevOps account. The next thing we are going to need is a source control repo to store the ARM templates. A source control system, also called a version control system, allows developers to collaborate on code and track changes. It is an

Infrastructure as code with Azure DevOps - Part 1: Getting started

Infrastructure as code with Azure DevOps - Part 1: Getting started

It seems like on every blog or forum I read someone is talking about how the discipline of DevOps can “increase agility” and deliver value with an “increased velocity”. What I don’t see a lot of, is someone explaining how to configure and use the tooling that makes that

Using VSCode for ARM template development

Using VSCode for ARM template development

In a world where everything apparently needs to be a web app, the internet has plenty of articles, guides, and tutorials on setting up VSCode with all those hipster javascript languages like Node, Vue and React; however, nearly everything I read on authoring and deploying ARM templates uses Microsoft Visual

HackTheBox - Falafel

HackTheBox - Falafel

There’s a lot of cool stuff going on in this challenge. Double file extension upload vulnerabilities, type juggling, magic hashes and frame buffer dumping just to name a few. It was difficult to complete and required combining a number of different techniques, but that’s what made this box

HackTheBox - Valentine

HackTheBox - Valentine

This challenge sees a user shell obtained by exfiltrating sensitive information via a vulnerability called Heartbleed in the OpenSSL cryptography library; which is a widely used implementation of the Transport Layer Security (TLS) protocol. From there, I was able to overwrite a read-only file (/etc/passwd) and grant myself root

HackTheBox - Aragog

HackTheBox - Aragog

Aragog was a delightful challenge on HackTheBox. It’s up there with one of my favorites so far! To complete this box, I was able to get a shell by exploiting an XML External Entity (XXE) vulnerability and lifting the ssh key file of a user. Once logged in, I