Ok, so we have all our Nagios configs being sanitized and checked by Jenkins, why not Puppet: IT Automation Software for System Administrators? WHY NOT PUPPET!? A lot of this is going to be rehash of the PRIOR article but I wanted to document this out for later anyways since it’s slightly different. Step One: Assumptions and Layout I’m going to stop and assume we are well past the Jenkins setup phase. Please see the prior article for that… or better yet? make puppet do it for you. That’s what it is for. ...

Ok… so that is not the best name I’ve every come up with. Sorry, but whatever. This is a quick but fun one. I have been collecting malware with my BunnyPot for a while and have been finding some diminishing returns coming to me. I started thinking that I can set up more of these low interaction server honeypots but how can I get even MORE goods? The ability to grab random files pushed to any server seems like a limited way here… ...

I know this isn’t the most revolutionary tip ever but my google searches pulled up nada when I tried to figure this out. I’m an IDA Pro MAC user. Bastard child of IDA right? Not really, except for plugins usually which is the point of this short tips post. If you are using simpliFiRE.IDAscope to help you dig through malware you are collecting with your bunnypot (and gods why aren’t you?) you will bang against the WinAPI browser whining about the following error while searching for native windows calls1 ...

Now who would have thought, I start blogging about git and people have advice. This post isn’t just my personal learning but also some advice I received from others! git reset HEAD^ From Alexis: Something I’m doing a lot is when I mess up with git, I sometimes need to uncommit something but keep the changes I had just before the commit. git add -i From Alexis: “Use this…” Brief but powerful advice. I never thought of using the interactive mode personally but if you are doing a complex commit or want to double over your work git’s interactive mode is fairly robust. ...

Welcome to another edition on how to automate the hell out of your workflow. Preface One thing I have been addicted to since I learned it was source control. I don’t understand how some developers work without it… and I really don’t understand how any syadmins live without it. I have actually found it more useful as a sysadmin as a programmer, but only because at my day job I have used it in most of our major configs. Putting our 400+ file bind setup in subversion and using hooks to test and deploy our changes was not only a massive time saver but tail saver as well. ...

Backstory My git-fu sucks. I have to use an awesome git tool called SourceTree to do the git wizardry that I do. It’s totally free and for the Mac so if you want to just jump into git and have expert features clicks away go download this. I bought it back when it cost money but now you can have it for free. I’ll wait… Anyways, I’ve been rolling around in the lap of GIT/SourceTree luxury these past months; clicking away and using features I only wished SVN could ever touch. However when jumping around between machines and VMs it would be faster to just use the command line. Now a days I’m now on the development team of a well sized open source project and having to fumble around git & github while testing submissions and making patches to help other people test is just NOT COOL. I think it all came to a head when the main project maintainer started flaunting some of his git-fu when submitting and fixing patches… well honestly since I just love cramming as much into my head as possible I thought I would hone my git foo. ...