Jeremy Druin

Professional pen-tester, Mutillidae developer, trainer and cat-hearder.

[Jeremy Druin @webpwnized]

@psiinon Sure. https://t.co/quaC3Xoxvx; TL;DR
docker-compose up -d

[Jeremy Druin @webpwnized]

Registration is open for the next KY ISSA full-day Workshop: Personal Digital Privacy! Join us for a great training that supports the KY ISSA community. Lunch is included.

Registration: https://t.co/MyPOtloIKD

[Jeremy Druin @webpwnized]

I talked to several Project Teams struggling to fine-tune Google Cloud Armor rulesets, without deactivating the WAF. I built a live environment to show how to quickly locate and tune out false positives. https://t.co/sVlSeJtjMR

[Jeremy Druin @webpwnized]

The first KY ISSA training of 2024 is in Louisville this Saturday. There are still some tickets although EventBright dropped the "Going Fast" fire emoji on the event this morning. https://t.co/eHywWtY4B6

[Jeremy Druin @webpwnized]

@mubix @ashleyhacksss The purpose of the pen test is to generate actionable intelligence for the customer. The report is what matters. All the hacking is just but an intermediate step in the process.

[Jeremy Druin @webpwnized]

On Saturday, January 20, the KY ISSA is hosting the
Application Security Testing Workshop, live, in-person in Louisville KY. Road trip! https://t.co/eHywWtYCqE

[Jeremy Druin @webpwnized]

Mutillidae 2.11.1 released; Server-side Request Forgery (SSRF) added, bugs fixed; Merry Christmas; https://t.co/r1ZyXjUYtG

[Jeremy Druin @webpwnized]

Off topic, but my students ask a lot "Where did the Kali menu bar go?", so I made a 1-minute video; https://t.co/UhRdNE6Nd3

[Jeremy Druin @webpwnized]

Adding several new lab walkthroughs to Mutillidae; Two videos will drop each day this week; https://t.co/b6sppqzGx4

[Jeremy Druin @webpwnized]

Scanning Terraform configuration for security vulnerabilities in less than 5 minutes with @bridgecrewio's Checkov; https://t.co/PLODHQQUyp

[Jeremy Druin @webpwnized]

Playlist: Vuln Scanning Dockerfiles, Terraform configs, and container images with @AquaSecTeam's Trivy; https://t.co/OHihFozHw3

[Jeremy Druin @webpwnized]

Playlist: Automating Web Application Vulnerability Assessment using @StackHawk's Scanner; https://t.co/iwh9wSsy3m

[Jeremy Druin @webpwnized]

@psiinon @owasp I'll see if the issue can be resolved. Thanks for the heads up something was wrong. BTW, Stack Hawk is coming along nicely.

[Jeremy Druin @webpwnized]

Video series released on basic of application containers; https://t.co/YCHof8SjYP

[Jeremy Druin @webpwnized]

@psiinon @owasp Yes, it is. Been so long since I filled out the project page, I can't even tell you how long.

[Jeremy Druin @webpwnized]

Posted video tutorial on running Mutillidae from Dockerhub images; https://t.co/K82ifTr5WW

[Jeremy Druin @webpwnized]

Mutillidae 2.8.57 released; Added diagnostics page for when app cannot connect to the database; Helps folks deploying to Docker/Kubernetes/Cloud; https://t.co/r1ZyXjUYtG

[Jeremy Druin @webpwnized]

Mutillidae DockerHub project released; uses Docker Compose to pull the official Mutillidae images from DockerHub; https://t.co/quaC3Xoxvx

[Jeremy Druin @webpwnized]

Video tutorial on How to Run Mutillidae on Docker (using the mutillidae-docker project); https://t.co/5oJ9NW1Qa0