The Eye
•
1 like•1,006 views
The document discusses the shortcomings of traditional monitoring and advocates for a test-driven monitoring approach called TheEye. It notes that traditional monitoring provides too much redundant information and that the key things to monitor are whether tests pass, response times are low enough, and the system is functioning properly. TheEye runs tests on a project or system at regular intervals to check functionality and collects the results to monitor health. Collectd is recommended for collecting additional system metrics when needed.
Report
Share
Report
Share
Download to read offline
Recommended
Takipi
This document introduces Eudy Sekgota, a software developer of 4 years, and provides information about the error monitoring tool Takipi. It explains that Takipi uses JVMTI to monitor Java applications without impacting performance, collects and analyzes data to recreate errors and diagnose their root causes. Some benefits of Takipi mentioned are helping teams or individuals quickly solve intermittent issues or problems in legacy code without wasting time replicating errors.
Postmortem of a uwp xaml application development
This document provides tips and tricks for developing Universal Windows Platform (UWP) applications using C# and XAML, including techniques for adapting the user interface for different devices, persisting navigation state, improving performance, debugging issues, and deploying apps to the Microsoft Store. Specific strategies covered include using a reflow technique to rearrange UI elements, serializing navigation history with a stack of objects, avoiding reliance on NavigationCache, using debug stopwatches and profiling tools, adding exception handling, and integrating AppInsights for analytics and crash reporting.
DefCamp 2013 - MSF Into The Worm Hole
This document provides an overview of using the Metasploit framework for penetration testing web applications. It discusses Metasploit modules like exploits, payloads, and listeners. It describes using direct exploits against hosts and browser exploits like heap spraying. It also covers using Metasploit for information gathering with Nmap and storing scan data in the Metasploit database. The document demonstrates a client-side attack against Internet Explorer using a binary payload and Immunity Debugger.
Nmap2Nessus Presentation Slides at Black Hat Asia Arsenal 2015
This document describes nmap2nessus, a tool that takes Nmap scan results as input in XML format and uses them to configure and launch a targeted vulnerability scan with Nessus. It explains how nmap2nessus works by extracting open ports and live IPs from the Nmap file, modifying an existing Nessus policy, and starting a scan with that policy. The document also provides instructions for using nmap2nessus and includes a demo of it used against a Metasploitable2 virtual machine.
Storyplayer
Storyplayer is a new open-source testing tool created by DataSift to help plug a gap in their layered testing strategy. It is designed to test services and systems using simple PHP scripts and stories. Storyplayer includes modules for vagrant, savageD, graphite and more to help set up test environments, monitor tests, and test non-functional requirements. It is available on GitHub and can help developers and testers share responsibility for testing different layers.
Vorlon.js
Vorlon.js is a remote web debugging tool that allows debugging of websites across browsers and platforms. It uses Node.js, Express.js, Socket.io and Passport.js. Vorlon.js comes with 11 default plugins for debugging tasks like inspecting the DOM, network requests, and unit testing. Developers can also create custom plugins and debug websites remotely on mobile devices through a simple script tag inclusion.
In the desert, without a camel
This is the tale of a DevOps journey through a wasteland where Perl is a third-class citizen. In the Hadoop world, anything that doesn't run on the JVM is not exactly, um... welcome. And while I love where I work these days, Perl is looked down upon, and often considered a tool of "last resort"...
However, despite the title of this talk, I have managed to sneak in quite a lot of Perl by means of a solid DevOps ethos and a solid philosophy of systems management from bare metal up through end-user applications. Turns out, Perl really *is* the best tool for the job in a *lot* of the situations I deal with from day-to-day.
In this talk you will learn about the fundamentals of my approach, along with details of the tools and techniques I have employed in the administration of the data warehouse infrastructure of the world's largest travel-review company. You will also learn how to make it *much* easier to use Perl and CPAN code in places other people would consider it infeasible, and fall back to more "universal" tools like awk and bash.
Surviving Slashdot
Technical presentation from 2005 about how to make your web site survive slashdot/digg style mega load.
Recommended
Takipi
This document introduces Eudy Sekgota, a software developer of 4 years, and provides information about the error monitoring tool Takipi. It explains that Takipi uses JVMTI to monitor Java applications without impacting performance, collects and analyzes data to recreate errors and diagnose their root causes. Some benefits of Takipi mentioned are helping teams or individuals quickly solve intermittent issues or problems in legacy code without wasting time replicating errors.
Postmortem of a uwp xaml application development
This document provides tips and tricks for developing Universal Windows Platform (UWP) applications using C# and XAML, including techniques for adapting the user interface for different devices, persisting navigation state, improving performance, debugging issues, and deploying apps to the Microsoft Store. Specific strategies covered include using a reflow technique to rearrange UI elements, serializing navigation history with a stack of objects, avoiding reliance on NavigationCache, using debug stopwatches and profiling tools, adding exception handling, and integrating AppInsights for analytics and crash reporting.
DefCamp 2013 - MSF Into The Worm Hole
This document provides an overview of using the Metasploit framework for penetration testing web applications. It discusses Metasploit modules like exploits, payloads, and listeners. It describes using direct exploits against hosts and browser exploits like heap spraying. It also covers using Metasploit for information gathering with Nmap and storing scan data in the Metasploit database. The document demonstrates a client-side attack against Internet Explorer using a binary payload and Immunity Debugger.
Nmap2Nessus Presentation Slides at Black Hat Asia Arsenal 2015
This document describes nmap2nessus, a tool that takes Nmap scan results as input in XML format and uses them to configure and launch a targeted vulnerability scan with Nessus. It explains how nmap2nessus works by extracting open ports and live IPs from the Nmap file, modifying an existing Nessus policy, and starting a scan with that policy. The document also provides instructions for using nmap2nessus and includes a demo of it used against a Metasploitable2 virtual machine.
Storyplayer
Storyplayer is a new open-source testing tool created by DataSift to help plug a gap in their layered testing strategy. It is designed to test services and systems using simple PHP scripts and stories. Storyplayer includes modules for vagrant, savageD, graphite and more to help set up test environments, monitor tests, and test non-functional requirements. It is available on GitHub and can help developers and testers share responsibility for testing different layers.
Vorlon.js
Vorlon.js is a remote web debugging tool that allows debugging of websites across browsers and platforms. It uses Node.js, Express.js, Socket.io and Passport.js. Vorlon.js comes with 11 default plugins for debugging tasks like inspecting the DOM, network requests, and unit testing. Developers can also create custom plugins and debug websites remotely on mobile devices through a simple script tag inclusion.
In the desert, without a camel
This is the tale of a DevOps journey through a wasteland where Perl is a third-class citizen. In the Hadoop world, anything that doesn't run on the JVM is not exactly, um... welcome. And while I love where I work these days, Perl is looked down upon, and often considered a tool of "last resort"...
However, despite the title of this talk, I have managed to sneak in quite a lot of Perl by means of a solid DevOps ethos and a solid philosophy of systems management from bare metal up through end-user applications. Turns out, Perl really *is* the best tool for the job in a *lot* of the situations I deal with from day-to-day.
In this talk you will learn about the fundamentals of my approach, along with details of the tools and techniques I have employed in the administration of the data warehouse infrastructure of the world's largest travel-review company. You will also learn how to make it *much* easier to use Perl and CPAN code in places other people would consider it infeasible, and fall back to more "universal" tools like awk and bash.
Surviving Slashdot
Technical presentation from 2005 about how to make your web site survive slashdot/digg style mega load.
Docker intro
This document discusses Docker containers and how they provide separation of concerns between operations and development teams. It covers how containers isolate applications from the underlying operating system and hardware. The document also demonstrates how to build a basic Docker container with a Dockerfile and run a container using Docker commands. Finally, it briefly mentions tools like Docker Compose, Serf, and HAProxy that can be used to manage containerized applications.
Linuxconf 2011 parallel languages talk
The slides from my parallel programming talk at LCA 2011. It is an overview of several languages that offer parallel programming paradigms with a strong bias towards functional programmin
Iwmn architecture
The document discusses the evolution of a Catalyst application to use lighter weight components including removing the model layer and using Redis for sessions and RabbitMQ for the backend. It started as a standard Catalyst app and was stripped down over time, moving content to CouchDB, sessions to Redis, and the backend to RabbitMQ. Lessons learned included using plugins, choosing technologies like Redis, CouchDB and RabbitMQ, and getting a minimum viable product out quickly before refactoring.
Scaling web apps_with_message_queues
slides from my talk at LinuxConf 2012 about the iWantMyName architecture and more in general how to scale a monolithic web app to a scalable app using a message queue.
Url ux
This document discusses best practices for designing URLs for websites, recommending that URLs be predictable, obvious, and easy for people to type in order to have a good user experience. Domain names should clearly indicate what the site is about rather than being obscure or misleading. Short, simple, and straightforward URLs are preferable to long or complicated ones.
No sql
NoSQL refers to non-relational databases that became popular alternatives to traditional SQL databases. SQL originated from research projects in the 1970s at IBM and Berkeley and saw commercial uptake in the 1980s by companies like Oracle and Tandem. SQL standards were established in the 1980s and 1990s, while open source SQL databases like MySQL and PostgreSQL emerged. The growth of web applications in the 2000s drove the development of NoSQL databases like MongoDB, Cassandra, and Redis to address the needs of sites with large, distributed datasets.
Cloud architectures
The document discusses moving applications from self-hosted data centers to cloud infrastructure which provides virtual resources on demand through APIs and automation. It notes that while traditionally financial and social media applications were hosted on-premises, moving to the cloud allows flexibility to try new things. It encourages the reader to experiment with cloud technologies and provides contact information for any questions.
Mojolicious
This document discusses Mojolicious, a lightweight web framework for Perl. It provides examples of using Mojolicious to quickly generate a new project skeleton, start a web server, and add routing and templates. The document also lists some advantages of Mojolicious like its small core dependencies, quick prototyping capabilities, and ability to scale from simple to more complex applications.
Test & Tea : ITSEC testing, manual vs automated
This document discusses the differences between manual and automated security testing. It provides examples of issues that automated scanners often cannot find, such as logical bugs, authentication bypasses, unknown parameters, and creative hacks. The conclusion recommends using automated tools for repetitive tasks but using human intelligence for more creative hacking problems in order to thoroughly test systems.
Automate Everything! (No stress development/Tallinn)
Brief story about how to bring much happiness to live using modern technologies and some good engineering principles. To learn more, aim yourself to http://dev.solita.fi/ - or just decide to improve a bit today.
Steamlining your puppet development workflow
The document discusses ways to streamline a Puppet development workflow including using revision control, running Puppet in noop or automatic mode, moving changes slowly through testing and using branches, reporting on changes, and implementing testing strategies like unit testing with rspec-puppet and integration testing with serverspec. It also recommends tools like Foreman, Norman, Puppetfile, and Jenkins to improve testing and deployment.
Puppet Camp New York 2014: Streamlining Puppet Development Workflow
The document discusses ways to streamline a Puppet development workflow including using revision control, running Puppet in noop or automatic mode, moving changes slowly through testing and using branches, reporting on changes, and implementing testing strategies like unit testing with rspec-puppet and integration testing with serverspec. It also recommends tools like Foreman, Norman, Puppetfile, and Jenkins to improve testing and deployment.
Cross-platform logging and analytics
The document discusses logging and analytics for software products. It notes that only logging essential information is important to understand current issues based on past events. Effective logging requires balancing what to log with actually implementing the logging. The document proposes logging all events to a single, standardized format that can be queried across systems to gain insights that are otherwise difficult to obtain from separate logging mechanisms.
OSMC 2011 | Distributed monitoring using NSClient++ by Michael Medin
Dezentralisiertes Monitoring ist häufig eine Mischung aus verschiedenen Lösungen und Protokollen. NSClient++ soll in Zukunft eine ganzheitliche Lösung schaffen, ungeachtet davon, ob Windows, Linux oder Solaris genutzt wird oder die entsprechenden Ergebnisse aktiv oder passiv ermittelt werden. Deshalb wurde die Arbeit an einem Dezentralisierungsmechanismus aufgenommen mit dem man einzelne Kommandos versenden, Checkergebnisse empfangen und darüber hinaus auch Konfigurationselemente verteilen kann.
Der Vortrag wird eine kurze Einführung in die neuen Konzepte geben und darauf aufbauend verschiedene Möglichkeiten aufzeigen aus den einzelnen Komponenten eine verteiltes Monitoring Framework aufzubauen.
Ui Testing with Ghost Inspector
Jay Luker will be presenting an introduction to Ghost Inspector, a cloud-based web UI testing service that takes some (some!) of the pain away from creating browser-based, web application tests. Think Selenium, but for projects that are short on the resources, infrastructure and/or coding expertise to confidently develop and manage a suite of fully automated, “good-enough” UI tests.
Jay is a Senior Software Engineer at Harvard DCE where he works on back-end applications and software for analytics data collection, deployment automation, and integration testing for the Extension School’s video processing and delivery system. Previously he has been an IT Specialist at the Smithsonian Astrophysics Data System, and a Software Developer at Ex Libris.
The basics of hacking and penetration testing 이제 시작이야 해킹과 침투 테스트 kenneth.s.kwon
About the book: the basics of hacking and pernetration testing
한국 책으로 '이제 시작이야 해킹과 침투테스트'를 요약 및 정리함.
Backtrack .
Monitoring Servers, With a Little Help from my Bots
This paper discusses a method of employing bots instead of people to monitor servers or server rooms. A bot is a remote controlled computer or a remote controlled program. A bot is usually a malicious program which is an element of a botnet. A botnet is used for doing malicious things such as spreading spam mails or doing DDoS Attacks. We have made bots and we are using bots for doing beneficial things such as monitoring a server instead of doing malicious things. We are monitoring a web server in our campus using a bot. This bot is tweeting whether the server is running or not periodically on the twitter. We are also monitoring a server room in our campus using another bot. This bot shows managers transition of the room temperature and others.
Sumatra and git
Sumatra is a System Management Tool to keep track of your simulation results. Now it has also git support.
20120524 english lt2_pythontoolsfortesting
This document discusses Python tools for testing, including py.test, tox, and TravisCI. It provides information about each tool: py.test is an improved unit testing library compared to nose, with readable test results, mocking features, and JUnit XML output; tox runs tests across multiple Python versions using virtualenv; and TravisCI is a continuous integration service that runs tests automatically on GitHub code commits for open source projects in various languages including Python. Examples of configuration files for tox and TravisCI are also included.
Cooking a rabbit pie
This document discusses using AMQP and RabbitMQ for real-time system performance monitoring and job queueing. It describes key AMQP concepts like exchanges, queues, routing keys, and delivery modes. It then discusses how the speaker built a job queueing system called CatalystX::JobServer that uses these concepts and RabbitMQ. Demo examples are shown of using this system to queue and monitor the status of jobs. Potential next steps and other solutions like Gearman are also mentioned.
It Sounded Good on Paper - Lessons Learned with Puppet
This talk is a 12 point guide on the things we did wrong during our journey with Puppet. We hope sharing helps people prevent the same mistakes in the future.
Puppet Development Workflow
A presentation given at PuppetCamp Chicago 2015 on the Puppet Development Workflow used at Grubhub. It walks through philosophy as well as process.
More Related Content
Viewers also liked
Docker intro
This document discusses Docker containers and how they provide separation of concerns between operations and development teams. It covers how containers isolate applications from the underlying operating system and hardware. The document also demonstrates how to build a basic Docker container with a Dockerfile and run a container using Docker commands. Finally, it briefly mentions tools like Docker Compose, Serf, and HAProxy that can be used to manage containerized applications.
Linuxconf 2011 parallel languages talk
The slides from my parallel programming talk at LCA 2011. It is an overview of several languages that offer parallel programming paradigms with a strong bias towards functional programmin
Iwmn architecture
The document discusses the evolution of a Catalyst application to use lighter weight components including removing the model layer and using Redis for sessions and RabbitMQ for the backend. It started as a standard Catalyst app and was stripped down over time, moving content to CouchDB, sessions to Redis, and the backend to RabbitMQ. Lessons learned included using plugins, choosing technologies like Redis, CouchDB and RabbitMQ, and getting a minimum viable product out quickly before refactoring.
Scaling web apps_with_message_queues
slides from my talk at LinuxConf 2012 about the iWantMyName architecture and more in general how to scale a monolithic web app to a scalable app using a message queue.
Url ux
This document discusses best practices for designing URLs for websites, recommending that URLs be predictable, obvious, and easy for people to type in order to have a good user experience. Domain names should clearly indicate what the site is about rather than being obscure or misleading. Short, simple, and straightforward URLs are preferable to long or complicated ones.
No sql
NoSQL refers to non-relational databases that became popular alternatives to traditional SQL databases. SQL originated from research projects in the 1970s at IBM and Berkeley and saw commercial uptake in the 1980s by companies like Oracle and Tandem. SQL standards were established in the 1980s and 1990s, while open source SQL databases like MySQL and PostgreSQL emerged. The growth of web applications in the 2000s drove the development of NoSQL databases like MongoDB, Cassandra, and Redis to address the needs of sites with large, distributed datasets.
Cloud architectures
The document discusses moving applications from self-hosted data centers to cloud infrastructure which provides virtual resources on demand through APIs and automation. It notes that while traditionally financial and social media applications were hosted on-premises, moving to the cloud allows flexibility to try new things. It encourages the reader to experiment with cloud technologies and provides contact information for any questions.
Mojolicious
This document discusses Mojolicious, a lightweight web framework for Perl. It provides examples of using Mojolicious to quickly generate a new project skeleton, start a web server, and add routing and templates. The document also lists some advantages of Mojolicious like its small core dependencies, quick prototyping capabilities, and ability to scale from simple to more complex applications.
Viewers also liked (8)
Similar to The Eye
Test & Tea : ITSEC testing, manual vs automated
This document discusses the differences between manual and automated security testing. It provides examples of issues that automated scanners often cannot find, such as logical bugs, authentication bypasses, unknown parameters, and creative hacks. The conclusion recommends using automated tools for repetitive tasks but using human intelligence for more creative hacking problems in order to thoroughly test systems.
Automate Everything! (No stress development/Tallinn)
Brief story about how to bring much happiness to live using modern technologies and some good engineering principles. To learn more, aim yourself to http://dev.solita.fi/ - or just decide to improve a bit today.
Steamlining your puppet development workflow
The document discusses ways to streamline a Puppet development workflow including using revision control, running Puppet in noop or automatic mode, moving changes slowly through testing and using branches, reporting on changes, and implementing testing strategies like unit testing with rspec-puppet and integration testing with serverspec. It also recommends tools like Foreman, Norman, Puppetfile, and Jenkins to improve testing and deployment.
Puppet Camp New York 2014: Streamlining Puppet Development Workflow
The document discusses ways to streamline a Puppet development workflow including using revision control, running Puppet in noop or automatic mode, moving changes slowly through testing and using branches, reporting on changes, and implementing testing strategies like unit testing with rspec-puppet and integration testing with serverspec. It also recommends tools like Foreman, Norman, Puppetfile, and Jenkins to improve testing and deployment.
Cross-platform logging and analytics
The document discusses logging and analytics for software products. It notes that only logging essential information is important to understand current issues based on past events. Effective logging requires balancing what to log with actually implementing the logging. The document proposes logging all events to a single, standardized format that can be queried across systems to gain insights that are otherwise difficult to obtain from separate logging mechanisms.
OSMC 2011 | Distributed monitoring using NSClient++ by Michael Medin
Dezentralisiertes Monitoring ist häufig eine Mischung aus verschiedenen Lösungen und Protokollen. NSClient++ soll in Zukunft eine ganzheitliche Lösung schaffen, ungeachtet davon, ob Windows, Linux oder Solaris genutzt wird oder die entsprechenden Ergebnisse aktiv oder passiv ermittelt werden. Deshalb wurde die Arbeit an einem Dezentralisierungsmechanismus aufgenommen mit dem man einzelne Kommandos versenden, Checkergebnisse empfangen und darüber hinaus auch Konfigurationselemente verteilen kann.
Der Vortrag wird eine kurze Einführung in die neuen Konzepte geben und darauf aufbauend verschiedene Möglichkeiten aufzeigen aus den einzelnen Komponenten eine verteiltes Monitoring Framework aufzubauen.
Ui Testing with Ghost Inspector
Jay Luker will be presenting an introduction to Ghost Inspector, a cloud-based web UI testing service that takes some (some!) of the pain away from creating browser-based, web application tests. Think Selenium, but for projects that are short on the resources, infrastructure and/or coding expertise to confidently develop and manage a suite of fully automated, “good-enough” UI tests.
Jay is a Senior Software Engineer at Harvard DCE where he works on back-end applications and software for analytics data collection, deployment automation, and integration testing for the Extension School’s video processing and delivery system. Previously he has been an IT Specialist at the Smithsonian Astrophysics Data System, and a Software Developer at Ex Libris.
The basics of hacking and penetration testing 이제 시작이야 해킹과 침투 테스트 kenneth.s.kwon
About the book: the basics of hacking and pernetration testing
한국 책으로 '이제 시작이야 해킹과 침투테스트'를 요약 및 정리함.
Backtrack .
Monitoring Servers, With a Little Help from my Bots
This paper discusses a method of employing bots instead of people to monitor servers or server rooms. A bot is a remote controlled computer or a remote controlled program. A bot is usually a malicious program which is an element of a botnet. A botnet is used for doing malicious things such as spreading spam mails or doing DDoS Attacks. We have made bots and we are using bots for doing beneficial things such as monitoring a server instead of doing malicious things. We are monitoring a web server in our campus using a bot. This bot is tweeting whether the server is running or not periodically on the twitter. We are also monitoring a server room in our campus using another bot. This bot shows managers transition of the room temperature and others.
Sumatra and git
Sumatra is a System Management Tool to keep track of your simulation results. Now it has also git support.
20120524 english lt2_pythontoolsfortesting
This document discusses Python tools for testing, including py.test, tox, and TravisCI. It provides information about each tool: py.test is an improved unit testing library compared to nose, with readable test results, mocking features, and JUnit XML output; tox runs tests across multiple Python versions using virtualenv; and TravisCI is a continuous integration service that runs tests automatically on GitHub code commits for open source projects in various languages including Python. Examples of configuration files for tox and TravisCI are also included.
Cooking a rabbit pie
This document discusses using AMQP and RabbitMQ for real-time system performance monitoring and job queueing. It describes key AMQP concepts like exchanges, queues, routing keys, and delivery modes. It then discusses how the speaker built a job queueing system called CatalystX::JobServer that uses these concepts and RabbitMQ. Demo examples are shown of using this system to queue and monitor the status of jobs. Potential next steps and other solutions like Gearman are also mentioned.
It Sounded Good on Paper - Lessons Learned with Puppet
This talk is a 12 point guide on the things we did wrong during our journey with Puppet. We hope sharing helps people prevent the same mistakes in the future.
Puppet Development Workflow
A presentation given at PuppetCamp Chicago 2015 on the Puppet Development Workflow used at Grubhub. It walks through philosophy as well as process.
Generating unit tests based on user logs
Developing without automated testing is hard and risky. Making legacy code testable is hard. Try to improve your logging, add a data layer and see if you can drive testing from user behavior.
Django production
This was a presentation given at San Diego Python's Django Day:
http://www.meetup.com/pythonsd/events/95751792/
https://github.com/pythonsd/learning-django
Debugging Complex Systems - Erlang Factory SF 2015
Debugging complex systems can be difficult. Luckily, the Erlang ecosystem is full of tools to help you out. With the right mindset and the right tools, debugging complex Erlang systems can be easy. In this talk, I'll share the debugging methodology I've developed over the years.
Puppet Camp NYC 2014: Build a Modern Infrastructure in 45 min!
The document describes how to build a modern infrastructure using Puppet modules. It discusses setting up MCollective for orchestration, Sensu for monitoring, Logstash for logging, and Jenkins for continuous integration. A Puppet module called moderninfra is demonstrated that defines the architecture and installs/configures all of the required components including RabbitMQ, Elasticsearch, and Kibana. The full infrastructure can then be built out across multiple nodes by writing Hiera data and node definitions.
BSides Lisbon 2013 - All your sites belong to Burp
This talk is going to be all about Burp. I will explain why is such a great tool and how it compares with similar ones.
Its going to have a quick walkthrough of its main features, but the juicy part is going to be about how to fully explore its main tools, such as the scanner, intruder and sequencer, to increase the number and type of vulnerabilities found.
In addition, I will provide an overview of the Burp Extender Interface and how to easily and quickly take advantage of extensions to increase its awesomeness. I will show how easy is for an pentester to translate an idea to a extension and (I hope) publicly release one plugin to further help pentesters.
The talks objective is to increase your efficiency while using Burp, either by taking advantage of its excellent tools or by adding that feature that really need.
Presented at BSides Lisbon at 04/10/13 (http://bsideslisbon.org)
Why internal pen tests are still fun
This document discusses techniques for internal penetration testing. It begins by explaining why internal pen tests are more interesting than external or web app tests due to the ability to gain shells on internal systems. It then provides tips for easy exploits such as exploiting weak passwords, lack of patching, and improper access controls to gain initial access. Further tips include using tools like Responder to capture credentials, using a USB rubber ducky to quickly gain access when a user is logged in, and techniques for safely dumping passwords without antivirus detection. The document concludes by discussing how to escalate privileges to domain admin, loot sensitive data from file shares and databases, and scripts to automate post-exploitation tasks. Mitigations are briefly discussed as well as tips
Similar to The Eye (20)
Automate Everything! (No stress development/Tallinn)
Automate Everything! (No stress development/Tallinn)
Puppet Camp New York 2014: Streamlining Puppet Development Workflow
Puppet Camp New York 2014: Streamlining Puppet Development Workflow
OSMC 2011 | Distributed monitoring using NSClient++ by Michael Medin
OSMC 2011 | Distributed monitoring using NSClient++ by Michael Medin
The basics of hacking and penetration testing 이제 시작이야 해킹과 침투 테스트 kenneth.s.kwon
The basics of hacking and penetration testing 이제 시작이야 해킹과 침투 테스트 kenneth.s.kwon
Monitoring Servers, With a Little Help from my Bots
Monitoring Servers, With a Little Help from my Bots
It Sounded Good on Paper - Lessons Learned with Puppet
It Sounded Good on Paper - Lessons Learned with Puppet
Debugging Complex Systems - Erlang Factory SF 2015
Debugging Complex Systems - Erlang Factory SF 2015
Puppet Camp NYC 2014: Build a Modern Infrastructure in 45 min!
Puppet Camp NYC 2014: Build a Modern Infrastructure in 45 min!
BSides Lisbon 2013 - All your sites belong to Burp
BSides Lisbon 2013 - All your sites belong to Burp
More from Lenz Gschwendtner
realising ideas
the slides from my ignite talk at ignite wellington. all about mind hacks to get ideas into reality. will link the video here too once it is online.
MPI, Erlang and the web
slides from my talk at LCA2010 in Wellington about how to scale web services and why parallel programming and open standards matter
RabbitMQ + CouchDB = Awesome
This document proposes a system using RabbitMQ and CouchDB to provide a scalable and flexible backend that can handle various frontends. RabbitMQ is used for messaging between daemons, while CouchDB is used to define and manage workflows and store persistent messages to allow asynchronous callbacks to continue workflows. The system addresses challenges of scaling, different frontends, cloud hosting, maintenance, asynchronous tasks, and message correlation.
RabbitMQ for Perl mongers
A talk I held at perl mongers Wellington about RabbitMQ and Net::AMQP. A brief introduction to RabbitMQ and some basic code samples on how to use it from perl.
RabbitMQ
The document introduces RabbitMQ, an open source message broker that implements the Advanced Message Queuing Protocol (AMQP). It discusses why AMQP is an open industry standard that is not language dependent and supported by many major companies. It then provides an overview of messaging concepts like queues, exchanges, routing and pub/sub using RabbitMQ examples. It also mentions some advanced features of AMQP like authentication, load balancing and persistent/non-persistent messages. Finally, it provides information on how to get started with RabbitMQ.
Umleitung: a tiny mochiweb/CouchDB app
The slides from erlounge Wellington 02-2009. Umleintung is a tiny HTTP redirect daemon based on mochiweb and CouchDB.
It describes how to bootstrap a mochiweb application and integrate CouchDB.
More from Lenz Gschwendtner (6)
Recently uploaded
Ocean lotus Threat actors project by John Sitima 2024 (1).pptx
Ocean Lotus cyber threat actors represent a sophisticated, persistent, and politically motivated group that poses a significant risk to organizations and individuals in the Southeast Asian region. Their continuous evolution and adaptability underscore the need for robust cybersecurity measures and international cooperation to identify and mitigate the threats posed by such advanced persistent threat groups.
Webinar: Designing a schema for a Data Warehouse
Are you new to data warehouses (DWH)? Do you need to check whether your data warehouse follows the best practices for a good design? In both cases, this webinar is for you.
A data warehouse is a central relational database that contains all measurements about a business or an organisation. This data comes from a variety of heterogeneous data sources, which includes databases of any type that back the applications used by the company, data files exported by some applications, or APIs provided by internal or external services.
But designing a data warehouse correctly is a hard task, which requires gathering information about the business processes that need to be analysed in the first place. These processes must be translated into so-called star schemas, which means, denormalised databases where each table represents a dimension or facts.
We will discuss these topics:
- How to gather information about a business;
- Understanding dictionaries and how to identify business entities;
- Dimensions and facts;
- Setting a table granularity;
- Types of facts;
- Types of dimensions;
- Snowflakes and how to avoid them;
- Expanding existing dimensions and facts.
Driving Business Innovation: Latest Generative AI Advancements & Success Story
Are you ready to revolutionize how you handle data? Join us for a webinar where we’ll bring you up to speed with the latest advancements in Generative AI technology and discover how leveraging FME with tools from giants like Google Gemini, Amazon, and Microsoft OpenAI can supercharge your workflow efficiency.
During the hour, we’ll take you through:
Guest Speaker Segment with Hannah Barrington: Dive into the world of dynamic real estate marketing with Hannah, the Marketing Manager at Workspace Group. Hear firsthand how their team generates engaging descriptions for thousands of office units by integrating diverse data sources—from PDF floorplans to web pages—using FME transformers, like OpenAIVisionConnector and AnthropicVisionConnector. This use case will show you how GenAI can streamline content creation for marketing across the board.
Ollama Use Case: Learn how Scenario Specialist Dmitri Bagh has utilized Ollama within FME to input data, create custom models, and enhance security protocols. This segment will include demos to illustrate the full capabilities of FME in AI-driven processes.
Custom AI Models: Discover how to leverage FME to build personalized AI models using your data. Whether it’s populating a model with local data for added security or integrating public AI tools, find out how FME facilitates a versatile and secure approach to AI.
We’ll wrap up with a live Q&A session where you can engage with our experts on your specific use cases, and learn more about optimizing your data workflows with AI.
This webinar is ideal for professionals seeking to harness the power of AI within their data management systems while ensuring high levels of customization and security. Whether you're a novice or an expert, gain actionable insights and strategies to elevate your data processes. Join us to see how FME and AI can revolutionize how you work with data!
Let's Integrate MuleSoft RPA, COMPOSER, APM with AWS IDP along with Slack
Discover the seamless integration of RPA (Robotic Process Automation), COMPOSER, and APM with AWS IDP enhanced with Slack notifications. Explore how these technologies converge to streamline workflows, optimize performance, and ensure secure access, all while leveraging the power of AWS IDP and real-time communication via Slack notifications.
みなさんこんにちはこれ何文字まで入るの？40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの？えこ...
ここ3000字までしか入らないけどタイトルの方がたくさん文字入ると思います。
TrustArc Webinar - 2024 Global Privacy Survey
How does your privacy program stack up against your peers? What challenges are privacy teams tackling and prioritizing in 2024?
In the fifth annual Global Privacy Benchmarks Survey, we asked over 1,800 global privacy professionals and business executives to share their perspectives on the current state of privacy inside and outside of their organizations. This year’s report focused on emerging areas of importance for privacy and compliance professionals, including considerations and implications of Artificial Intelligence (AI) technologies, building brand trust, and different approaches for achieving higher privacy competence scores.
See how organizational priorities and strategic approaches to data security and privacy are evolving around the globe.
This webinar will review:
- The top 10 privacy insights from the fifth annual Global Privacy Benchmarks Survey
- The top challenges for privacy leaders, practitioners, and organizations in 2024
- Key themes to consider in developing and maintaining your privacy program
June Patch Tuesday
Ivanti’s Patch Tuesday breakdown goes beyond patching your applications and brings you the intelligence and guidance needed to prioritize where to focus your attention first. Catch early analysis on our Ivanti blog, then join industry expert Chris Goettl for the Patch Tuesday Webinar Event. There we’ll do a deep dive into each of the bulletins and give guidance on the risks associated with the newly-identified vulnerabilities.
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...Edge AI and Vision Alliance
For the full video of this presentation, please visit: https://www.edge-ai-vision.com/2024/06/building-and-scaling-ai-applications-with-the-nx-ai-manager-a-presentation-from-network-optix/
Robin van Emden, Senior Director of Data Science at Network Optix, presents the “Building and Scaling AI Applications with the Nx AI Manager,” tutorial at the May 2024 Embedded Vision Summit.
In this presentation, van Emden covers the basics of scaling edge AI solutions using the Nx tool kit. He emphasizes the process of developing AI models and deploying them globally. He also showcases the conversion of AI models and the creation of effective edge AI pipelines, with a focus on pre-processing, model conversion, selecting the appropriate inference engine for the target hardware and post-processing.
van Emden shows how Nx can simplify the developer’s life and facilitate a rapid transition from concept to production-ready applications.He provides valuable insights into developing scalable and efficient edge AI solutions, with a strong focus on practical implementation.20240609 QFM020 Irresponsible AI Reading List May 2024
Everything I found interesting about the irresponsible use of machine intelligence in May 2024
Artificial Intelligence for XMLDevelopment
In the rapidly evolving landscape of technologies, XML continues to play a vital role in structuring, storing, and transporting data across diverse systems. The recent advancements in artificial intelligence (AI) present new methodologies for enhancing XML development workflows, introducing efficiency, automation, and intelligent capabilities. This presentation will outline the scope and perspective of utilizing AI in XML development. The potential benefits and the possible pitfalls will be highlighted, providing a balanced view of the subject.
We will explore the capabilities of AI in understanding XML markup languages and autonomously creating structured XML content. Additionally, we will examine the capacity of AI to enrich plain text with appropriate XML markup. Practical examples and methodological guidelines will be provided to elucidate how AI can be effectively prompted to interpret and generate accurate XML markup.
Further emphasis will be placed on the role of AI in developing XSLT, or schemas such as XSD and Schematron. We will address the techniques and strategies adopted to create prompts for generating code, explaining code, or refactoring the code, and the results achieved.
The discussion will extend to how AI can be used to transform XML content. In particular, the focus will be on the use of AI XPath extension functions in XSLT, Schematron, Schematron Quick Fixes, or for XML content refactoring.
The presentation aims to deliver a comprehensive overview of AI usage in XML development, providing attendees with the necessary knowledge to make informed decisions. Whether you’re at the early stages of adopting AI or considering integrating it in advanced XML development, this presentation will cover all levels of expertise.
By highlighting the potential advantages and challenges of integrating AI with XML development tools and languages, the presentation seeks to inspire thoughtful conversation around the future of XML development. We’ll not only delve into the technical aspects of AI-powered XML development but also discuss practical implications and possible future directions.
UiPath Test Automation using UiPath Test Suite series, part 6
Welcome to UiPath Test Automation using UiPath Test Suite series part 6. In this session, we will cover Test Automation with generative AI and Open AI.
UiPath Test Automation with generative AI and Open AI webinar offers an in-depth exploration of leveraging cutting-edge technologies for test automation within the UiPath platform. Attendees will delve into the integration of generative AI, a test automation solution, with Open AI advanced natural language processing capabilities.
Throughout the session, participants will discover how this synergy empowers testers to automate repetitive tasks, enhance testing accuracy, and expedite the software testing life cycle. Topics covered include the seamless integration process, practical use cases, and the benefits of harnessing AI-driven automation for UiPath testing initiatives. By attending this webinar, testers, and automation professionals can gain valuable insights into harnessing the power of AI to optimize their test automation workflows within the UiPath ecosystem, ultimately driving efficiency and quality in software development processes.
What will you get from this session?
1. Insights into integrating generative AI.
2. Understanding how this integration enhances test automation within the UiPath platform
3. Practical demonstrations
4. Exploration of real-world use cases illustrating the benefits of AI-driven test automation for UiPath
Topics covered:
What is generative AI
Test Automation with generative AI and Open AI.
UiPath integration with generative AI
Speaker:
Deepak Rai, Automation Practice Lead, Boundaryless Group and UiPath MVP
Salesforce Integration for Bonterra Impact Management (fka Social Solutions A...
Sidekick Solutions uses Bonterra Impact Management (fka Social Solutions Apricot) and automation solutions to integrate data for business workflows.
We believe integration and automation are essential to user experience and the promise of efficient work through technology. Automation is the critical ingredient to realizing that full vision. We develop integration products and services for Bonterra Case Management software to support the deployment of automations for a variety of use cases.
This video focuses on integration of Salesforce with Bonterra Impact Management.
Interested in deploying an integration with Salesforce for Bonterra Impact Management? Contact us at sales@sidekicksolutionsllc.com to discuss next steps.
Skybuffer SAM4U tool for SAP license adoption
Manage and optimize your license adoption and consumption with SAM4U, an SAP free customer software asset management tool.
SAM4U, an SAP complimentary software asset management tool for customers, delivers a detailed and well-structured overview of license inventory and usage with a user-friendly interface. We offer a hosted, cost-effective, and performance-optimized SAM4U setup in the Skybuffer Cloud environment. You retain ownership of the system and data, while we manage the ABAP 7.58 infrastructure, ensuring fixed Total Cost of Ownership (TCO) and exceptional services through the SAP Fiori interface.
Introduction of Cybersecurity with OSS at Code Europe 2024
I develop the Ruby programming language, RubyGems, and Bundler, which are package managers for Ruby. Today, I will introduce how to enhance the security of your application using open-source software (OSS) examples from Ruby and RubyGems.
The first topic is CVE (Common Vulnerabilities and Exposures). I have published CVEs many times. But what exactly is a CVE? I'll provide a basic understanding of CVEs and explain how to detect and handle vulnerabilities in OSS.
Next, let's discuss package managers. Package managers play a critical role in the OSS ecosystem. I'll explain how to manage library dependencies in your application.
I'll share insights into how the Ruby and RubyGems core team works to keep our ecosystem safe. By the end of this talk, you'll have a better understanding of how to safeguard your code.
Choosing The Best AWS Service For Your Website + API.pptx
Have you ever been confused by the myriad of choices offered by AWS for hosting a website or an API?
Lambda, Elastic Beanstalk, Lightsail, Amplify, S3 (and more!) can each host websites + APIs. But which one should we choose?
Which one is cheapest? Which one is fastest? Which one will scale to meet our needs?
Join me in this session as we dive into each AWS hosting service to determine which one is best for your scenario and explain why!
Recently uploaded (20)
Ocean lotus Threat actors project by John Sitima 2024 (1).pptx
Ocean lotus Threat actors project by John Sitima 2024 (1).pptx
Driving Business Innovation: Latest Generative AI Advancements & Success Story
Driving Business Innovation: Latest Generative AI Advancements & Success Story
Let's Integrate MuleSoft RPA, COMPOSER, APM with AWS IDP along with Slack
Let's Integrate MuleSoft RPA, COMPOSER, APM with AWS IDP along with Slack
みなさんこんにちはこれ何文字まで入るの？40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの？えこ...
みなさんこんにちはこれ何文字まで入るの？40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの？えこ...
Deep Dive: AI-Powered Marketing to Get More Leads and Customers with HyperGro...
Deep Dive: AI-Powered Marketing to Get More Leads and Customers with HyperGro...
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
20240609 QFM020 Irresponsible AI Reading List May 2024
20240609 QFM020 Irresponsible AI Reading List May 2024
UiPath Test Automation using UiPath Test Suite series, part 6
UiPath Test Automation using UiPath Test Suite series, part 6
Salesforce Integration for Bonterra Impact Management (fka Social Solutions A...
Salesforce Integration for Bonterra Impact Management (fka Social Solutions A...
Introduction of Cybersecurity with OSS at Code Europe 2024
Introduction of Cybersecurity with OSS at Code Europe 2024
Choosing The Best AWS Service For Your Website + API.pptx
Choosing The Best AWS Service For Your Website + API.pptx
Nordic Marketo Engage User Group_June 13_ 2024.pptx
Nordic Marketo Engage User Group_June 13_ 2024.pptx
The Eye
- 1. TheEye
- 4. • lots of checks • lots of notifies • lots of effort to set up
- 5. lots of redundant bullshit
- 7. all I want to know is ...
- 8. is that beast working?
- 9. test driven monitoring FTW
- 10. • write tests for a project • consistency and functionality and ... • run those tests every n minutes • track the outcome
- 11. • i am not interested if memory is up 1GB • i am not interested if network traffic is lower or higher • i am not interested if CPU is maxed out
- 12. as long as ... • the tests pass • the response times are low enough • the beast is working and can be used
- 13. and if things go wrong?
- 15. _then_ we need • host infos • pretty pictures • as much info we can get about everything
- 16. but _only_ then!
- 18. TheEye
- 19. use Test::More tests => 4; use Test::WWW::Mechanize; my $mech = Test::WWW::Mechanize->new; $mech->get_ok('http://github.com'); $mech->base_is('http://github.com'); $mech->title_is("Secure source..."); $mech->content_contains("git reposi...");
- 21. easy!
- 22. the rest?
- 23. collectd!
- 24. links • http://github.com/norbu09/ TheEye • http://collectd.org/
- 25. credits • Lord of the Rings (film by Peter Jackson) • http://www.flickr.com/photos/pneumatic_transport/ • http://www.flickr.com/photos/puppydogbites/