Cloud

• Privilege escalation with Docker

  Today we are going to learn how to Elevate our Privileges in a Linux system using Docker. Docker What is Docker? Docker is a set of platform as a service products that uses OS-level virtualization to deliver software in packages called containers. Containers are isolated from one another and bundle their own software, libraries and configuration files; they can communicate with each other through well-defined channels. How does docker lead to privesc When an admin allows an un-privileged user access to the ‘docker’ group it allows us to make use of the docker CLI to create containers.
  Jul 5, 2020 - 4 min read

• Building a ToDo API with Golang and Kubernetes! – Part 3 – Building and Deploying our Application

  In [Part 1][1] and [Part 2][2] we built a functional API using Golang and MongoDB, although as it stands its insecure. We can add password protection using Basic Auth while deploying ([See here][3]). In this tutorial we will build a very tiny docker container and deploy to our Kubernetes Cluster. For the purposes of this tutorial I won’t be showing you how to setup a Kubernetes Cluster, However you can do it easily with [Terraform][4] and [DigitalOcean][5].
  Apr 21, 2018 - 3 min read

• Building a ToDo API with Golang and Kubernetes! – Part 2 – CRUD

  Hi and welcome to Part 2 of Building a ToDo API with Golang and Kubernetes! In part 1 we learned what we were going to build and how to use mux to route an HTTP Request to a Handler function. In this part we will learn how to build our endpoints for CRUD(Create, Read, Update, Delete) operations, And how to use MongoDB to store our ToDo Items. Key learning Points Handling HTTP Methods with mux How to use variables in your route path with mux Using mgo to Manipulate data in MongoDB MongoDB MongoDB is a free and open-source cross-platform document-oriented database program.
  Mar 4, 2018 - 8 min read

• Going Serverless with AWS – Serverless User Authentication – Part 3

  Hello and welcome back to Going Serverless with AWS. In Part 2 we learned how to use Python with AWS Lambda to Register a user to our RDS instance. Today we will learn how to build an API Gateway an Register our users using a JQuery. So lets get started! Building our API Gateway What is API Gateway Amazon API Gateway is an AWS service that enables developers to create, publish, maintain, monitor, and secure APIs at any scale.
  Nov 26, 2017 - 3 min read

• Going Serverless with AWS – Serverless User Authentication – Part 2

  Hello and welcome back to Going Serverless with AWS, In part 1 we learned what Serverless means and what we are going to build. In part 2 We will learn how to create an RDS instance with the AWS cli tools, and build our first lambda function, package it, deploy it, and invoke it using the AWS cli tools. In the spirit of keeping this as simple as possible you will be able to copy and paste all commands and get a working setup however this will be super insecure as passwords and things will be set using the AWS cli.
  Nov 5, 2017 - 5 min read

• Going Serverless with AWS – Serverless User Authentication – Part 1

  What is Serverless? Serverless architectures refer to applications that significantly depend on third-party services (knows as Backend as a Service or “BaaS”) or on custom code that’s run in ephemeral containers (Function as a Service or “FaaS”), the best known vendor host of which currently is AWS Lambda. By using these ideas, and by moving much behaviour to the front end, such architectures remove the need for the traditional ‘always on’ server system sitting behind an application.
  Nov 3, 2017 - 2 min read