POPULARITY
Hey friends! Still your grieving pal over here, but also your swarming friend and Protecting My Network Edge host — because this week I've been tinkering with something called Project Swarm and I've got my diapers on regarding it, but I really, really like what I see so far. Then, fair warning, I flip on the tangent light and verbally barf up some personal stuff at the end. I'll make the hand-off super clear, so if you want your free security podcast to do exactly what you want and nothing else — totally fair, and you won't offend me by hopping off. Here's what we cover: What is Project Swarm? This comes to us from our friends over at GreyNoise. It centers around little sensors you deploy to the edges of your network that you can dress up to look like just about anything — attracting flies to the honey, if you catch my drift. You get more enumeration, insight, and logging into whatever shenanigans those flies are using to poke at your edge. Setup was refreshingly easy: You need a very low-powered VM or hardware device (my understanding is it even works on a Raspberry Pi) mapped to a public IP, plus a free GreyNoise account. You generate an API key, copy-paste a one-line install, and off it goes. I threw mine on a tiny Ubuntu VM. The part where I didn't read the flipping manual: Mid-install my SSH connection dropped and I'm going "what the heck?!" Turns out the installer intentionally moves your real SSH to some arbitrary high port — so you can run a fake SSH honeypot on 22 while your legit connection lives elsewhere. Once I spotted the new port in the console, a quick firewall tweak and I was back in. Profiles give me level 14 giggidies: Once your sensor checks in, you assign it a profile. Vulnerable WordPress, Tomcat, a Cisco AnyConnect VPN, FTP honeypot, SSH honeypot — kind of all the honeypots. I went with a vulnerable WordPress instance. My one complaint: you can only assign one profile per sensor. My dream scenario of an SSH honeypot AND an FTP AND a vulnerable Tomcat all on one box will have to wait (or maybe that'd look too suspicious and scare the baddies off — who knows). The results were wild: Within a couple days I had thousands of connections, several flagged as malicious and tied to known botnets. I could see source IPs, malicious labels, whether they were residential or company or Google, and even download raw packet captures. There's clearly more telemetry to dig into (what people tried to spray into the login portal, etc.) — I meant to go deeper before recording and didn't, so consider this a "to be continued." Why do I care, since I'm not defending some huge infrastructure? Honestly it started as a brain break. But I've been testing a ton of external networks lately and nearly every company site is WordPress — which now powers around 43% of the internet. Running my own WordPress honeypot gives real oomph to those "your out-of-date WordPress is a big deal" conversations, where I can say "I run a WordPress honeypot and here's the aggressive password spraying and plugin/theme enumeration I'm seeing right now." See it, don't just hear it: I show the actual portal, sensor config pages, and more over on 7MinSec.club this week. Why not both, right? It's like that meme. GreyNoise also has a Project Swarm user webinar coming up — check their events page. And to be crystal clear: they are not a sponsor, this is all free, and I just think it's clever. Life update (the tangent portion): About the time you hear this, I'll be on my way to my dad's funeral, where I'm sharing some words and singing a song. I've been practicing like a madman per advice from my music director friend and guitar teacher — including a little brain hack of focusing hard on my fingers to stay a half-step removed from the emotion. And if I cry my face off up there? Who cares. This isn't America's Got Talent; it's the gesture. I'll be honest, 2026 has been a rough one, but I promised two bright spots and here they are: my son Cam (about to finish paramedic school) has been keeping grandpa's spirit alive by wearing my dad's shirts, sunglasses, and Apple watch, and getting a Cessna tattoo with my dad's actual handwriting and birth year. And you all — the kind words, the offers to talk, the shared stories — reminded me there are a whole lot of good people out there. Thank you for that. One more thing on the horizon: My brain's been a squirrel on pixie sticks, but for whatever reason I've been happily grinding the CARTP as a little vacation for my mind. I might take a swing at the exam this week — start it in the evening, grind a few hours, sleep, finish in the morning (I'm too old for 24 hours straight). I might pass, I might fail spectacularly. Either way I'll keep you posted, and if I get the cert, that's probably next week's topic!
Change log We've almost finished the first pass of the documentation for the new PHP course. I have 1 / 2 lessons to go. There are two more passes that I want to do before recording any of the lessons. The next pass will be to create the project from start to finish using the documentation but on a Ubuntu VM. The last pass will be to do the same bu on a Windows VM Last weeks show that was on shopping carts went live earlier this week. I had some internet issues last week so I couldn't do the live stream Your feedback 1) Eric writes in on my hack to check if PHP is working YT short and asks if the next video will be on the PHP 8 match expression and when to use it. I can't promise that it will be the next YT short but I can say that It is on the schedule. 2) Keral writes in on my PHP array sum tutorial and asks how do we sum fields in a database. There is a SUM function in MySQL. It takes one argument and that is the expression that you want to calculate. You can use it to find the sum of a field from several records by suppling the field name as the expression. Then add the reset of the query as usual. For example, To get the sum of a shopping basket you could do something like this; Let's say you had a table of order items with a foreign key linking to an orders table. Each order item record would also have a price field. You could get the sum of the orders price like so: select sum(order_item.price) from order_item where order_item.order_id = 4; Obviously change the table name of order to something else as order is a reserved keyword in MySQL. If you have a comment that you want read out on the show then either write a message on a YouTube video or send me a message on our contact form. Code Iteration time is critical to web development success I want to talk about a blog posted titled 3 lines of code shouldn't take all day https://devtails.xyz/3-lines-of-code-shouldnt-take-all-day by Adam Berg. In the post Adam talks about his time developing video games at Electronic Arts. He mentions that due to the testing tools and development requirements it could take up to a day to write 3 lines of code. This iteration time was greatly reduced when he used 'test beds'. Adam mentions in his article that the test beds focused on particular areas of code which meant the tooling was slimmed down. This allowed him to laser in to the code that needed to be tested and as a result made the code iteration far quicker. He goes on in the post to talk about using unit testing which also made his life a lot easier. These test packages only contained the code which was specific to his teams requirements. Again, this was a slimmed down portion of a game. He mentions that these test packages took less than a second to compile and run. This made him less distracted and he could focus on the task at hand.
Install a graphical user interface (GUI) with Ubuntu 20.04 running within WSL 2 on a Windows 10 computer. Microsoft have announced that an RDP based GUI will be added to WSL2, but it's not currently available. I'll show you how to get a GUI installed and how to connect to the GUI using remote desktop so you can start using that today. Menu: Overview: 0:00 Prerequisites: 1:20 Install WSL: 1:46 Install Ubuntu 20.04: 4:45 Install Ubuntu GUI: 7:25 Test RDP connection to the Ubuntu VM: 10:35 WSL commands: dism.exe /online /enable-feature /featurename:Microsoft-Windows-Subsystem-Linux /all /norestart dism.exe /online /enable-feature /featurename:VirtualMachinePlatform /all /norestart wsl --set-default-version 2 Ubuntu GUI commands: See pinned comment as YouTube doesn't allow all the commands. Good links: Microsoft GUI announcement: https://devblogs.microsoft.com/commandline/the-windows-subsystem-for-linux-build-2020-summary/ Ubuntu WSL2 GUI Install: In Ubuntu WSL: https://dev.to/darksmile92/linux-on-windows-wsl-with-desktop-environment-via-rdp-522g WSL 2 install: https://docs.microsoft.com/en-us/windows/wsl/install-win10 Docker for WSL2: https://docs.docker.com/docker-for-windows/wsl/ What is WSL? https://docs.microsoft.com/en-us/windows/wsl/about WSL documentation: https://docs.microsoft.com/en-us/windows/wsl/ WSL 2 Announcement: https://devblogs.microsoft.com/commandline/announcing-wsl-2/ WSL2 Docker Ubuntu 20.04 Ubuntu GUI WSL 2 Ubuntu GUI WSL Ubuntu GUI WSL 2 WSL 1 Ubuntu 18.04 windows subsystem for linux wsl2 ubuntu gui #wsl2 #ubuntu #windows
This is a FREE complete CCNP 350-401 ENCOR Course. In this video we use a Python script running on an Ubuntu VM running on my Mac to SSH to a Nexus device and extract JSON data. I'm going to continue to teach you some basic Python. I will be covering all the topics in the Cisco CCNP ENCOR exam. I want to make this content practical and it will include a lots of labs and demonstrations to help you better understand topics on the exam. Slides: https://bit.ly/encorjson3 CCNP ENCOR playlist: https://bit.ly/freeccnp Previous Video: https://youtu.be/8_R0gmpM8eI Menu: Overview: 0:01 First Python Script : 0:47 Second Python Script: 6:13 Third Python Script: 7:55 Fourth Python Script: 11:56 ====================== Special Offers: ====================== Cisco Press: Up to 50% discount Save every day on Cisco Press learning products! Use discount code BOMBAL during checkout to save 35% on print books (plus free shipping in the U.S.), 45% on eBooks, and 50% on video courses and simulator software. Offer expires December 31, 2020. Shop now. Link: bit.ly/ciscopress50 Boson software: 15% discount Link: bit.ly/boson15 Code: DBAF15P GNS3 Academy: CCNA ($10): bit.ly/gns3ccna10 Wireshark ($10): bit.ly/gns3wireshark DavidBombal.com CCNA ($10): bit.ly/ccnafor10 Wireshark ($9): bit.ly/wireshark9 ====================== Free and trial Network Software: ====================== Solar-PuTTY: http://bit.ly/SolarPutty SolarWinds TFTP Server: http://bit.ly/2mbtD6j WAN Killer: http://bit.ly/wankiller Engineers Toolset: http://bit.ly/gns3toolset IP Address Scanner: http://bit.ly/swipscan Network Device Scanner: http://bit.ly/swnetscan Wifi Heat Map: http://bit.ly/wifiheat Wifi Analyzer: http://bit.ly/swwifianalyzer SolarWinds NPM: http://bit.ly/getnpm Python JSON CCNP CCIE CCNP ENCOR CCNP 350-401 CCNP Enterprise ccnp training CCNP Security CCNP Data Center CCNP Service Provider CCNP Collaboration Cisco Certified Devnet Professional Cisco Certified Network Professional Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! #ccnp #encor #python
This is a FREE complete CCNP 350-401 ENCOR Course. In this video we use Python on a Nexus device to extract JSON data. I'm going to teach you some basic Python and get your started on your Python journey. In the next video I'll expand the Python scripts and run Python locally on a Ubuntu VM on my MacBook and SSH to the Nexus device and extract data from the Nexus device using Python. I will be covering all the topics in the Cisco CCNP ENCOR exam. I want to make this content practical and it will include a lots of labs and demonstrations to help you better understand topics on the exam. Slides: https://bit.ly/encorjson2 CCNP ENCOR playlist: https://bit.ly/freeccnp Previous Video: https://youtu.be/skE-rfw4PRc Menu: Overview: 0:01 Python on Nexus: 1:31 Python Script 2: 5:39 ====================== Special Offers: ====================== Cisco Press: Up to 50% discount Save every day on Cisco Press learning products! Use discount code BOMBAL during checkout to save 35% on print books (plus free shipping in the U.S.), 45% on eBooks, and 50% on video courses and simulator software. Offer expires December 31, 2020. Shop now. Link: bit.ly/ciscopress50 Boson software: 15% discount Link: bit.ly/boson15 Code: DBAF15P GNS3 Academy: CCNA ($10): bit.ly/gns3ccna10 Wireshark ($10): bit.ly/gns3wireshark DavidBombal.com CCNA ($10): bit.ly/ccnafor10 Wireshark ($9): bit.ly/wireshark9 ====================== Free and trial Network Software: ====================== Solar-PuTTY: http://bit.ly/SolarPutty SolarWinds TFTP Server: http://bit.ly/2mbtD6j WAN Killer: http://bit.ly/wankiller Engineers Toolset: http://bit.ly/gns3toolset IP Address Scanner: http://bit.ly/swipscan Network Device Scanner: http://bit.ly/swnetscan Wifi Heat Map: http://bit.ly/wifiheat Wifi Analyzer: http://bit.ly/swwifianalyzer SolarWinds NPM: http://bit.ly/getnpm CCNP CCIE CCNP ENCOR CCNP 350-401 CCNP Enterprise ccnp training CCNP Security CCNP Data Center CCNP Service Provider CCNP Collaboration Cisco Certified Devnet Professional Cisco Certified Network Professional Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! #ccnp #encor #python
Linus is taking a break from maintaining the kernel, AMP might be set free, and Firefox goes VR. It’s also been a big week for Linux on Windows with Flatpaks and a new distro running on WSL, and a flawless Ubuntu VM experience. Special Guest: Wes Payne.
Linus is taking a break from maintaining the kernel, AMP might be set free, and Firefox goes VR. It’s also been a big week for Linux on Windows with Flatpaks and a new distro running on WSL, and a flawless Ubuntu VM experience. Special Guest: Wes Payne.
Linus is taking a break from maintaining the kernel, AMP might be set free, and Firefox goes VR. It’s also been a big week for Linux on Windows with Flatpaks and a new distro running on WSL, and a flawless Ubuntu VM experience. Special Guest: Wes Payne.
Linux Terminal - Stream Our Mistakes EP 000 In our first episode we go over terminal command line in linux and specifically, how to install resilio sync on my Ubuntu VM.We also go over an open machine learning project matt was playing with to generate random quotes all in a linux environment. links:resilio sync - https://www.resilio.com/tmux - https://github.com/tmux/tmux/wikichar-rnn - https://github.com/karpathy/char-rnnsample quotes - http://octon.io/sample_quotes.txt youtube live broadcast: https://www.youtube.com/user/eddyizm/live Subscribe to our channel and follow my twitter feed to be notified of our next live broadcast and feel free to leave us comments and suggestions on what you want to see. eddyizmsite: http://eddyizm.comtwitter: http://twitter.com/eddyizngithub: https://github.com/eddyizm mattsite: http://octon.io/