Marvin Pinto marvinpinto

Terraforming API Gateway to SQS queue

Example of a bare-minimum terraform script to setup an API Gateway endpoint that takes records and puts them into an SQS queue.

SQS

Start by creating the SQS queue.

resource "aws_sqs_queue" "queue" {

Using Git Commit Message Templates to Write Better Commit Messages

The always enthusiastic and knowledgeable mr. @jasaltvik shared with our team an article on writing (good) Git commit messages: How to Write a Git Commit Message. This excellent article explains why good Git commit messages are important, and explains what constitutes a good commit message. I wholeheartedly agree with what @cbeams writes in his article. (Have you read it yet? If not, go read it now. I'll wait.) It's sensible stuff. So I decided to start following the

Upload GPS Tracks to Strava from your Command Line

This short tutorial describes how to upload GPS tracks to Strava using your command line interface / shell. It requires no special tools or any 3rd party code.

1. Generate an API Key

Run the following steps with your user logged in to Strava in your browser!

Strava uses OAuth to authenticate against 3rd party applications. In order to authenticate to your Strava account from your command line, you first have to generate an API key. Therefore go to this page https://strava.github.io/api/v3/oauth/ and create a new API. The settings are as follows:

3 Gripes With React

I started using React 3.5 years ago, and I still love it. It was such a well-designed solution that not much has changed since then, only superficial stuff like naming. What I learned then is still wholly applicable today because it's such a good idea (although now you can choose from many other libraries). On top of that, we now benefit from an entirely new architecture (fiber) without changing much.

GitHub for Bug Bounty Hunters

GitHub repositories can disclose all sorts of potentially valuable information for bug bounty hunters. The targets do not always have to be open source for there to be issues. Organization members and their open source projects can sometimes accidentally expose information that could be used against the target company. in this article I will give you a brief overview that should help you get started targeting GitHub repositories for vulnerabilities and for general recon.

Mass Cloning

You can just do your research on github.com, but I would suggest cloning all the target's repositories so that you can run your tests locally. I would highly recommend @mazen160's GitHubCloner. Just run the script and you should be good to go.

$ python githubcloner.py --org organization -o /tmp/output

Setup modern.ie vagrant boxes

Since modern.ie released vagrant boxes, it' no longer necessary to manually import the ova file to virtualbox, as mentioned here.

However, the guys at modern.ie didn't configured the box to work with WinRM. This how-to addresses that, presenting steps to proper repackage these boxes, adding WinRM support. Additionally configures chocolatey package manager and puppet provisioner.

	#!/usr/bin/env bash
	#
	# Use rofi to pick emoji because that's what this
	# century is about apparently...
	#
	# Requirements:
	# rofi, xsel, xdotool, curl, xmllint
	#
	# Usage:
	# 1. Download all emoji

	// For all the confusing Prometheus configuration and
	// regular expressions,
	// explained in examples.


	// Remember, there are default values for each item if it's missing.
	// regex is (.*),
	// replacement is $1,
	// separator is ;
	// ,and action is replace

	// A common redux pattern when dealing with async functions is to use thunk.
	// This usually means your action returns a new function instead of an action object,
	// and the thunk middleware will make it all work. Example:
	const asyncAction = () => dispatch => setTimeout(() => dispatch(someOtherAction()), 10000);

	// Now: maybe that async stuff going on is calling some API which you don't want to overload
	// with request, and that's what debounce is for.
	// This is an example of a debounced function which will only be calleable once every second.
	import { debounce } from 'lodash';
	const debouncedFn = debounce(() => callApi(), 1000, { leading: true, trailing: false });

	/**

	The following can replace the file in the Field Arrays example
	(https://github.com/erikras/redux-form/tree/master/examples/fieldArrays) to demonstrate this functionality.

	**/
	import React from 'react'
	import { connect } from 'react-redux'
	import { Field, FieldArray, reduxForm, formValueSelector } from 'redux-form'
	import validate from './validate'