Category: Administration

I am root. Let's explore privilege escalation in OS Linux.

I spent the first quarter of 2020 preparing for the OSCP exam. Searching for information on Google and numerous "blind" attempts took up all my free time. It turned out to be especially challenging to understand privilege escalation mechanisms. The PWK course pays great attention to this topic, but there are always not enough methodological materials. There are plenty of manuals online with useful commands, but I […]

CI/CD in Github Actions for a project on Flask+Angular

In this article, I will share my experience setting up CI/CD using the Plesk control panel and GitHub Actions. Today we will learn how to deploy a simple project called "Helloworld." It is written on the Python framework Flask, with workers on Celery and a frontend on Angular 8. Links to the repositories: backend, frontend. In the first part of the article, we will look at our project […]

VxLAN Fabric. Part 2

Hello, Habr. I continue the series of articles on VxLAN EVPN technology, which were written specifically for the launch of the "Network Engineer" course from OTUS. Today, we will consider an interesting part of the tasks — routing. Although it may sound trivial, within the framework of a network fabric, things can be more complicated. Part 1 of the series — L2 connectivity between servers in […]

From Outsourcing to Development (Part 1)

Hello everyone, my name is Sergey Emelyanchik. I am the head of the Audit-Telecom company, the lead developer, and the author of the Veliam system. I decided to write an article about how my friend and I created an outsourcing company, developed software for ourselves, and later began distributing it to anyone interested via a SaaS model. About how I categorically did not believe that this […]

From Outsourcing to Development (Part 2)

In the previous article, I talked about the background of Veliam's creation and the decision to distribute it through a SaaS model. In this article, I will discuss what we had to do to make the product not local but public. About how we started distribution and what problems we faced. Planning The current server part for users was on Linux. Almost […]

We are moving away from paid RPA platforms and relying on OpenSource (OpenRPA)

Introduction Previously, the topic of automating desktop GUI applications with Python was covered in great detail on Habr. I was very drawn to that article because it revealed elements similar to those involved in creating robots. As part of my professional activities, I work on automating business processes for a company (RPA is a field that lacked fully functional […]

Automating Desktop GUI with Python + pywinauto: How to Integrate with MS UI Automation

The Python library pywinauto is an open-source project for automating desktop GUI applications on Windows. In the last two years, it has gained significant new features: Support for MS UI Automation technology. The interface remains the same, and now supports: WinForms, WPF, Qt5, Windows Store (UWP), and more — almost everything available on Windows. A system of backends/plugins (currently […]

Snort or Suricata. Part 1: Choosing a Free IDS/IPS to Protect Corporate Networks

Once, a regular firewall and antivirus programs were sufficient to protect a local network, but against attacks from modern hackers and the surge of malware lately, this setup is no longer effective. The good old firewall only analyzes packet headers, allowing or blocking them based on a set of formal rules. It knows nothing about the content of the packets, and therefore cannot […]

Experience with the Rutoken technology for user registration and authentication in the system (part 2)

Good day! Let's continue to explore this topic (the previous part can be found at the link). Today we will move on to the practical part. We'll start by setting up our own certificate authority based on the full-featured open-source cryptographic library openSSL. This algorithm was tested using Windows 7. After installing openSSL, we can perform various cryptographic operations (for example, key generation and […]

WAL-G: Backups and Recovery for PostgreSQL Databases

It has long been known that making backups in SQL dumps (using pg_dump or pg_dumpall) is not the best idea. For backing up PostgreSQL databases, it's better to use the pg_basebackup command, which creates a binary copy of the WAL logs. But when you start exploring the entire process of creating a backup and restoration, you'll realize that you need to create at least a couple of tricycles to manage all of this […]

Why a BIM Manager earns 100 thousand and how to become one

This article will help two types of people: those who want to change jobs, can write simple code, and are familiar with constructions and drawings, not just by hearsay. Those studying at construction faculties and thinking about where to aim. BIM managers can earn 100,000 ₽. This is almost four times more than the salary of the typical Russian, which is 23,500 […]

How to protect your public website with ESNI.

Hello, Habrahabr. My name is Ilya, and I work in the platform team at Exness. We are developing and implementing the foundational infrastructure components that our product development teams use. In this article, I would like to share the experience of implementing encrypted SNI (ESNI) technology in the infrastructure of public websites. The use of this technology will enhance security when working with public websites and […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster