http://brettlischalk.com Sometimes you may see different vulnerabilities when Trivy is run locally vs when GitLab container scan runs. Here are some reasons why. Thu, 19 Oct 2023 00:00:00 -0500 http://brettlischalk.com/posts/why-gitlab-container-scan-results-might-not-match-trivy http://brettlischalk.com/posts/why-gitlab-container-scan-results-might-not-match-trivy A demonstration of how an API could rotate its shared secret with zero down time Sat, 29 Apr 2023 00:00:00 -0500 http://brettlischalk.com/posts/zero-downtime-api-shared-secret-rotation http://brettlischalk.com/posts/zero-downtime-api-shared-secret-rotation Lets build a threat model of a CI pipeline for fun Sat, 24 Apr 2021 00:00:00 -0500 http://brettlischalk.com/posts/ci-pipeline-threat-model http://brettlischalk.com/posts/ci-pipeline-threat-model Taking the plunge on a Windows based laptop after years using OS X and Linux based devices Mon, 05 Apr 2021 00:00:00 -0500 http://brettlischalk.com/posts/switching-to-windows-part-1 http://brettlischalk.com/posts/switching-to-windows-part-1 Cheapest and fastest ways to get your project online Sat, 19 Dec 2020 00:00:00 -0600 http://brettlischalk.com/posts/build-a-site-quick-and-cheap http://brettlischalk.com/posts/build-a-site-quick-and-cheap Things you should know about the "vulnerabilities" ECR image scan results report Tue, 01 Dec 2020 00:00:00 -0600 http://brettlischalk.com/posts/ecr-image-scanning-gotchas http://brettlischalk.com/posts/ecr-image-scanning-gotchas Walkthrough of the processes followed to analyze the Practical Malware Analysis Lab 3-3 malware. Wed, 27 Jun 2018 00:00:00 -0500 http://brettlischalk.com/posts/practical-malware-analysis-lab-3-3 http://brettlischalk.com/posts/practical-malware-analysis-lab-3-3 Walkthrough of the processes followed to analyze the Practical Malware Analysis Lab 3-2 malware. Sun, 31 Dec 2017 00:00:00 -0600 http://brettlischalk.com/posts/practical-malware-analysis-lab-3-2 http://brettlischalk.com/posts/practical-malware-analysis-lab-3-2 Walkthrough of the processes followed to analyze the Practical Malware Analysis Lab 3-1 malware. Wed, 20 Sep 2017 00:00:00 -0500 http://brettlischalk.com/posts/practical-malware-analysis-lab-3-1 http://brettlischalk.com/posts/practical-malware-analysis-lab-3-1 In the first blog post about the Kankun smartplug, the Android application was decompiled and the AES-256 bit encryption key was found. In this blog post, the network traffic between the mobile app and smartphone will be captured, the network traffic will be decrypted utilizing a script from Payatu and the encryption key found previously, and the Kankun Smartplug will be controlled via the Kankun Controller Script from 0x00string Fri, 15 Sep 2017 00:00:00 -0500 http://brettlischalk.com/posts/kankun-smartplug-network-decryption http://brettlischalk.com/posts/kankun-smartplug-network-decryption