CVE-2020-1967

A playground to note something

misc A playground to note something Tool ipmitool Build How to make in Ubuntu apt-get install automake libtool apt-get install libssl-dev # yum install openssl-devel /bootstrap /configure make How to make in Windows install Cygwin (32/64) with following package gcc-core make openssl-devel diff autoconf automake m4 libtool lib

Publish Docker images for https://github.com/rossmacarthur/sheldon CI

sheldon-cross Docker images for sheldon CI How it works A Rust tool renders a Dockerfile from a template Dockerfile for particular target For each target An image is built from this Dockerfile This image is published to Docker Hub This image is referenced in the Crosstoml file in the sheldon repository Releases 023 Released February 21st, 2021 Update to OpenSSL 1

Open API spec definition for the scanners that can be plugged into Harbor to do artifact scanning.

pluggable-scanner-spec Open API spec definition for the scanners that can be plugged into Harbor to do artifact scanning Background Add support to Harbor for using other image scanners than Trivy by providing an adapter layer implemented as an HTTP API between Harbor and the scanners' native interfaces This will provide runtime configurable scanner invocation to provid

Practice questions for Certified Kubernetes Security Specialist (CKS) exam

CKS Simulator Kubernetes 125 Pre Setup Question 1 | Contexts Question 2 | Runtime Security with Falco Question 3 | Apiserver Security Question 4 | Pod Security Standard Question 5 | CIS Benchmark Question 6 | Verify Platform Binaries Question 7 | Open Policy Agent Question 8 | Secure Kubernetes Dashboard Question 9 | AppArmor Profile Question 10 | Container Runtime Sandbox gV

Proof of concept exploit about OpenSSL signature_algorithms_cert DoS flaw (CVE-2020-1967)

CVE-2020-1967 Proof of concept exploit about OpenSSL signature_algorithms_cert DoS flaw (CVE-2020-1967) Credit for the original finding to Bernd Edlinger, additional analysis by Matt Caswell and Benjamin Kaduk, this demo by Imre Rad Prerequisite Server or client applications that call the SSL_check_chain() function during or after a TLS 13 handshake According to the documen

cks1.28

CKS Simulator Kubernetes 128 killersh Pre Setup Once you've gained access to your terminal it might be wise to spend ~1 minute to setup your environment You could set these: alias k=kubectl # will already be pre-configured export do="--dry-run=client -o yaml" # k create deploy nginx --image=nginx $do export now="--force

CVE info of GIT commits for OpenSSL

openssl-cve Table of Contents Overview YAML Format Proposal for CVE Git Commits YAML Format Proposal for CVE Checking Rules Help is Needed from OpenSSL Developers Overview CVE info of GIT commits for OpenSSL This repo provides CVE info of GIT commits for the OpenSSL git repo Such CVE info can be used by the bomsh tool to create the CVE database for OpenSSL, which is then use