Monthly Archives: November 2023

SaturdayMP Show #21: Adding Basic Auth to NGINX Passenger Docker (Part 1)

In this episode I explain and then start to add HTTP Basic Authentication to the Saturday MP website which is a Ruby on Rails application hosted on a Passenger Docker image. As usual I ran into some trouble and at … Continue reading

Posted in Saturday MP Show, Software Development | Tagged , , , , , | Comments Off on SaturdayMP Show #21: Adding Basic Auth to NGINX Passenger Docker (Part 1)

SaturdayMP Show #20: Hack the Box – Busqueda Part 3 (Root Flag)

In this episode I find the root flag for the Busqueda machine on Hack the Box. Took a wrong turn looking for Gitea and Git vulnerabilities but eventually found the root flag with help from the walkthrough. Watch part 2 … Continue reading

Posted in Saturday MP Show, Security | Tagged , , | Comments Off on SaturdayMP Show #20: Hack the Box – Busqueda Part 3 (Root Flag)

Saturday MP Show #19: Comparing Docker Volumes to Docker Compose Watch

In this episode I answer a viewer question from episode #16: Are Docker Volumes are a two way sync?. The answer is kind-of. You can view the question in the comments section of episode #16 where I try out Docker … Continue reading

Posted in Saturday MP Show | Tagged , , , | Comments Off on Saturday MP Show #19: Comparing Docker Volumes to Docker Compose Watch

SaturdayMP Show #18: Hack the Box – Busqueda Part 2 (Reverse Shell)

In this episode I get a reverse shell working and make some progress on capturing the root flag. Spoiler: There is a self hosted GitHub like website. Watch part 1 of me hacking the Busqueda machine at: Thanks to Hack … Continue reading

Posted in Saturday MP Show, Security | Tagged , , , | Comments Off on SaturdayMP Show #18: Hack the Box – Busqueda Part 2 (Reverse Shell)

Don’t Commit Sensitive Information to the Repository

One of the most common security issues I in code reviews is sensitive information, such as production credentials, API keys, etc, in the source code. The source code I just pulled from the repository. The source code all the developers … Continue reading

Posted in Security | Tagged , | Comments Off on Don’t Commit Sensitive Information to the Repository

Saturday MP Show #17: Hack the Box – Busqueda (User Flag)

In this episode I find the user flag for the Busqueda machine on Hack the Box. Perhaps with a little help from the walkthrough and Chat GPT to assist with my lack of Python knowledge. Thanks to Hack the Box … Continue reading

Posted in Saturday MP Show, Security | Tagged , , | Comments Off on Saturday MP Show #17: Hack the Box – Busqueda (User Flag)