Disclaimer: I have no intention of detailing how the box was exploited, with a map of how to break this system again. I intend to show the methods used to discover and trace the breach throughout the server. Welcome to part 3 of 3 of my Forensics Analysis blog. Following the first 2 parts of […]
Amazon S3 (Simple Storage Service) is a handy tool for online file storage that is often used when setting up VMs. While transferring data between availability zones in Amazon Web Services (AWS) is a trivial task, transferring S3 buckets from AWS to AWS GovCloud requires a greater challenge. In order to start, you’ll need a […]
Why bother starting Jenkins in neutral? Jenkins can be a dangerous virtual machine to bring up. This situation arises when I’m recovering one, cloning one, or testing provisioning automation. The damage one can cause is hard to predict because it depends on exactly what yours does, but I’ll try to paint a couple common pictures […]
Agile has increasingly become the standard way software development organizations deliver software. According to a recent TechBeachon survey, most organizations lean toward agile or purely rely on it for their software delivery. For a majority of government projects, waterfall methodologies continue to be heavily used with large amounts of process governance and controls. While the government […]
Great news. I’ll be talking in Chicago on September 19th at the Agile Testing and Test Automation Summit 2016. I’ll be discussing different testing frameworks, with a focus on the team based decision to choose the correct one. Be sure to register if you’re in the area for the conference, as it’s sure to be […]
I’m currently working on a project where we are migrating from SVN to Git. There are a bunch of large applications with fairly complicated build processes that are going to have to be adjusted as we transition from SVN to Git. Because of this, I cannot easily just “import code and throw the switch” to […]
In addition to Ant support, the Secure Testing Framework now has included Gradle support! In the latest release of the Secure Testing Framework, you will see that there is an example build.gradle and gradle.properties included in the repository. In the build.gradle the first thing I’d like to call attention to is the first line: apply […]
One of the most challenging topics we discuss in our Mobile Application Testing training course is how to determine what devices to purchase for testing and how to get the widest device coverage for tests. When thinking through this there are several factors to consider: On what kinds of devices was my app designed to be used? […]
Recently I have been researching better ways to write my Selenium tests as they have become rather hard to maintain. One pattern that I have found immensely useful is the Page Object Model (POM). In this blog post I will talk about what makes the POM a good pattern and show a simple framework I put […]
I recently needed to setup OpenLDAP for a client. We setup an entire pipeline, similar to SecureCI and wanted to tie all of the tools into one login system. The installation was pretty straitforward, but we wanted to ensure our tooling stack was secured, so we moved a bit beyond the basics. This is all […]
