PinnedDmitrii PushkarevExtend OpenVPN features. Magic scriptsWe are all familiar with OpenVPN and its many features, but not everyone is aware of the possibility of extending these features by using…5 min read·Aug 28, 2023----
Dmitrii PushkarevAWS IAM Roles Anywhere with PKCS11 support (YubiKey)Hi everyone! AWS recently launched the ‘Roles Anywhere’ feature, enhancing security by allowing the use of short-term credentials instead…4 min read·Apr 21, 2024----
Dmitrii PushkarevVulnerability Management with FleetDM and SplunkHi everyone! I won’t describe what it is and how to install it, I’ll just say it’s a great soft. You can find a lot materials in the…4 min read·Feb 27, 2024----
Dmitrii PushkarevHow to automate getting access credentials from AssumeRoleWithSAML for AWS CLIHi everyone! In my case I have Keycloak as an Identity provider in AWS and several configured roles. There is no problem when we login in…3 min read·Feb 24, 2024----
Dmitrii PushkarevIdentifying Asana Desktop Clients Vulnerable to CVE-2023–49314 with Splunk.One day I received the notification about new vulnerability in Desktop version from Asana. They spoke about CVE-2023–49314. In theory…2 min read·Feb 10, 2024----
Dmitrii PushkarevThe Hidden Risks of Personal API Keys in Cloud ServicesIn the digital age, cloud services like Confluence, Asana, BambooHR and various messaging platforms have become integral to our daily…2 min read·Feb 5, 2024----
Dmitrii PushkarevCURL Client Authentication using certificates from smartcard.Hi. In this story I will explain how to make HTTP requests in CURL using smart card certificates, in my case yubikey.4 min read·Jan 30, 2024----
Dmitrii PushkarevHow to collect Asana audit logsHi! Yes, Asana has a special API endpoint for log collection. You can find information about it here — Audit log API and Supported audit…2 min read·Jan 25, 2024----
Dmitrii PushkarevYubiKey SSH authenticationHi everyone! Today I’ll show how can we authenticate to a server over SSH using a YubiKey, without changing the server’s existing SSH…4 min read·Jan 23, 2024----
Dmitrii PushkarevYubiKey AttestationI appreciate YubiKey for its exceptional security features, particularly the attestation capability which allows for remote verification…4 min read·Jan 22, 2024----