Environment starts with a Laravel website that happens to be running in debug mode. I’ll abuse a CVE that allows me to set the environment via the URL. I’ll find in the debug crashes that if the environment is set to “preprod”, the login page is bypassed, and use that to get access to the internal site. There I’ll abuse another CVE to bypass file filtering in the Laravel filemanager to upload a webshell. I’ll find a GPG-encrypted file and the private key to get access to the next ...| 0xdf hacks stuff
Suppose that you have a shell script that's not necessarily complex| utcc.utoronto.ca
bq コマンドライン ツールと、そのデフォルト値とフラグの設定方法について説明します。対話型シェル、スクリプト、サービス アカウントで bq コマンドライン ツールを使用してクエリを実行する方法を示します。| Google Cloud
This article reviews graph databases, as a storage technology similar to relational databases like Postgres and document stores like MongoDB. We review the basic concepts of graph DBs, some example engines, use cases in which treating data as a graph can be useful. We explore a project that uses a graph DB to store data about cloud systems, and we use a graph DB to model a router+firewall’s configuration file, including queries over the stored data, which we also compare to a similar Postgr...| blog.jreyesr.com
In this post, let’s see how to control psql from outside withthe coproc functionality in bash.| postgresql.verite.pro
Computers and computer systems are build up from deterministic, comprehensible, building blocks. Their operations and behaviors can be understood and reasoned about. I relate my personal beliefs and mindset on this point, and explore some manifestations and ramifications of this philosophy.| Made of Bugs