Metasploitable2 - FTP Exploitation using vsftpd 2.3.4 Backdoor 1. Objective To identify and exploit a known vulnerability in an FTP service running on a vulnerable target machine using industry-standard reconnaissance and exploitation techniques. 2. Lab Environment Component Description Attacker Machine Kali Linux Target Machine Metasploitable2 Network Type Host-only / NAT
Hi everyone! I've been working on a personal project to create a desktop virtual assistant that doesn't rely on the cloud. I wanted something that felt like JARVIS but kept my data 100% private. Brain: It uses Ollama as the backend, so you can run models like Llama 3, Mistral, or Phi-3 locally. Interface: Built with PyQt6 featuring a "holographic" glassmorphism effect (transparent and sleek).
This is Part 1 of a two-part series. Part 2 (coming soon): Connecting to spoke clusters from a controller using multicluster-runtime, driven by ClusterProfile. The Cluster Inventory API (multicluster.x-k8s.io) is driven by SIG-Multicluster and centered on the ClusterProfile resource. It only delivers value when something produces those ClusterProfiles. That something is a cluster manager. Today, t
When developers travel, we usually prepare the obvious things. Laptop charger. But there is one dependency that is easy to underestimate until it breaks: mobile internet. A trip to China makes this especially obvious. Not because China is hard to travel in, but because so many basic interactions are mobile-first: navigation, translation, ride-hailing, hotel communication, ticket confirmations, pay
If you maintain Go services, you've probably been here: a scanner flags a CVE, you spend 30 minutes tracing imports and call paths, and it turns out your code never touches the vulnerable function. I built GVS to automate that. Give it a repo URL and a CVE ID, and it does call graph analysis to determine whether the vulnerable symbols are actually reachable from your code. What it does: Builds cal
A follow-up: how the architecture works In my previous article, I explained why I built NGB Platform and what problem it is trying to solve: I Built an Open-Source Platform Foundation for Accounting-Centric Business Apps That article was mostly about the why. Why generic web frameworks are not enough for serious business applications. Why large ERP products solve many of the right problems, but
We've been there. JSON Schema gets hard to write as soon as your payload is non-trivial. Conditional logic, cross-field rules, business invariants, and at some point we stop writing contracts at all. We go code-first, generate the schema from annotations, and end up with 200 lines very few understand, and error messages referencing paths like #/properties/items/allOf/0/then/Then that map to nothin
What's new Based on early user feedback, Permi can now save your vulnerability scan results in three distinct formats to fit your workflow: --export results.txt – Human-readable plain text for quick reviews. --export results.json – Structured data designed for scripts and CI/CD automation. --export results.md – Clean Markdown, perfect for GitHub documentation or internal wikis. To try out the ne