https://iamstoxe.com/posts/ Recent content in Posts on stoXe Hugo -- gohugo.io en-us Devin Stokes Wed, 23 Sep 2020 14:47:38 -0700 https://iamstoxe.com/posts/from-workflow-engine-to-root/ Wed, 23 Sep 2020 14:47:38 -0700 https://iamstoxe.com/posts/from-workflow-engine-to-root/ What Are We Doing In my recent escapades of testing various workflow engines I eventually found and grew fond of Argo. Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Argo Workflows is implemented as a Kubernetes CRD. What does this mean? Basically you can define jobs via a yaml file and have it execute docker containers. It is more common than not for Argo to be able to run privileged containers and this is precisely what we intend to exploit. https://iamstoxe.com/posts/automating-the-deployment-of-your-forever-free-pihole-and-wireguard-server/ Wed, 09 Sep 2020 08:09:17 -0700 https://iamstoxe.com/posts/automating-the-deployment-of-your-forever-free-pihole-and-wireguard-server/ Pre Requisites: Oracle Cloud Account Terraform installed (Official Guide) Getting Required Oracle Keys and OCIDs Whether you’re using an Oracle client (see Software Development Kits and Command Line Interface) or a client you built yourself, you need to do the following: Create a user in IAM for the person or system who will be calling the API, and put that user in at least one IAM group with any desired permissions. https://iamstoxe.com/posts/how-to-setup-a-free-pi-hole-and-wireguard-vpn-server-in-the-cloud-for-free/ Fri, 28 Aug 2020 13:11:16 -0700 https://iamstoxe.com/posts/how-to-setup-a-free-pi-hole-and-wireguard-vpn-server-in-the-cloud-for-free/ These days there’s ads and trackers and malicious JS everywhere. It is almost what makes the internet tick at this point it would seem. Luckily for us we are not alone in the fight against intrusive ads and other unwanted data passing over our network. There are some incredibly smart people working very hard on our behalf to at least curb the worst of these offenders by way of various ad blocking technologies. https://iamstoxe.com/posts/setup-pi-hole-ad-blocking-vpn-server-on-google-cloud-free-tier/ Fri, 14 Aug 2020 22:18:57 -0700 https://iamstoxe.com/posts/setup-pi-hole-ad-blocking-vpn-server-on-google-cloud-free-tier/ Not responsible for any misuse, and/or otherwise unintended billing or other consequences as a result of following this guide. The goal of this guide is to enable you to safely and privately use the Internet on your phones, tablets, and computers with a self-run VPN Server in the cloud. It can be run at no cost to you; shields you from intrusive advertisements; and blocks your ISP, cell phone company, public WiFi hotspot provider, and apps/websites from gaining insight into your usage activity. https://iamstoxe.com/posts/using-proxycannon-ng-to-create-unlimited-rotating-proxies/ Mon, 03 Aug 2020 14:06:42 -0700 https://iamstoxe.com/posts/using-proxycannon-ng-to-create-unlimited-rotating-proxies/ As always, please don’t be dumb. Operate within the laws of your country. I am not responsible for anything you may or may not do with this article and the information herein. This is provided as an educational resource and should not be used to circumvent any security facilities. Using Proxycannon-ng to Create A Private Proxy Network The modern age of computers is amazing to me. In a few mere minutes we can spin up a seemingly unlimited number of virtual servers on any one of the hundreds of cloud providers out there around the world. https://iamstoxe.com/posts/orchestrating-nmap-against-millions-of-targets-with-argo/ Mon, 03 Aug 2020 12:14:08 -0700 https://iamstoxe.com/posts/orchestrating-nmap-against-millions-of-targets-with-argo/ Using Argo to Orchestrate NMAP Against Millions of Targets Argo is perfect for repeatable tasks and workflows that can be reused just by supplying a different parameter. Today we will work through a basic recon phase for a generic bug bounty program. 💡 For this example we assume you have an understanding of Argo and are comfortable with the templating involved. Take a look at my other articles on Argo if you’re new! https://iamstoxe.com/posts/argo-server/ Fri, 31 Jul 2020 13:03:38 -0700 https://iamstoxe.com/posts/argo-server/ Argo Server v2.5 and after The Argo Server is a server that exposes an API and UI for workflows. You’ll need to use this if you want to offload large workflows or the workflow archive. You can run this in either “hosted” or “local” mode. It replaces the Argo UI. Hosted Mode Use this mode if: You want a drop-in replacement for the Argo UI. If you need to prevent users from directly accessing the database. https://iamstoxe.com/posts/templating-with-argo/ Fri, 31 Jul 2020 13:03:32 -0700 https://iamstoxe.com/posts/templating-with-argo/ Building Templates in Argo Templating in argo was one of the more difficult things for me to fully wrap my head around. But perhaps this is more due to my lack of experience prior with code based deployments before, but once I played with it for a few days I really got the hang of it and would even at times… Wait for it… Submit workflows without any linting errors on the first try - Go me? https://iamstoxe.com/posts/argo-getting-started/ Fri, 31 Jul 2020 12:58:06 -0700 https://iamstoxe.com/posts/argo-getting-started/ Preface Setting up argo can be a pain at times. It is my hope that I can make it a little simpler for the masses. For this particular example I am going to assume you’re using minikube, or know how to setup your kubernetes instance. As there are a lot of variables minikube allows me to remove a lot of them when explaining the concepts here. Setting up minikube Let’s start up minikube with 2 cpus, 4000GB memory, and a 40gb Disk (thin-provisioned).