Home on Codewrecks

I have a WSL2 ubuntu installation where I have SAMBA installed and I really need it to answer to a specific name, something like \ubuntuwsl.

If you want to build a Full Framework based project from PowerShell, you need to locate MsBuild.exe tool tool to compile your project.

This is another post in the series “how to export Work Item data to Word Document”.

I got an old HP Proliant Microserver Gen7, it has Turion CPU, quite slow in these days, but I got 16GB RAM and 6 TB of caviar Red.

This morning I come across this article about another data exposure and I could not avoid to notice that it is another Elasticsearch exposed to the public. 894 GB of data was stored in an unsecured Elasticsearch cluster.

There are lots of reasons to use a classic VM in Azure, even if PAAS is the preferred way to approach the cloud, IAAS is still strong especially because not every product is ready to run on cloud providers.

This is the fourth article in a series of post dealing on why it is important to strictly validate user input.

This is the fourth article in a series of post dealing on why it is important to strictly validate user input.

After updating a big project from MongoDb C# driver 2.7 to latest 2.10 version I started having lots of error on Integration tests.

I’m a great fan of PowerShell script for build and release, even if Azure DevOps, GitHub Actions, TeamCity or Jenkins have pre-made task for common operations (zipping, file handling, etc).

Kali Linux on Windows Thanks to the new Windows Subsystem for Linux version 2, shortly called WSL2, we have now a real Linux kernel running in a real VM as the core of WSL.

Windows Subsystem for Linux was a nice toy to play, but never impressed me very much, one of the reason is its limitations.

Situation We have a legacy project, born when Asp.Net WebForm was still a thing and Asp.NET MVC was still not released.

Security is one of my long passions, I’ve spent lots of time on C++ and Assembly (both x86 and other architectures) and in that environment I’ve started exploring buffer overflow and other vulnerabilities.

We have a standard .NET standard solution with some projects and some Unit Tests, everything runs perfectly until we have the need to force compilation of one of the project in x86.

I should admit that I was one of the people that loved blogging with Windows Live Writer and in general with software that is able to simple edit content, paste images, press a button and your post is online.

Today we found excessive number of logs in Application Insight instance, an application that usually cost few bucks each month, started to use more resources.

This is the fourth article in a series of post dealing on why it is important to strictly validate user input.

Suppose you have a result of an Azure DevOps Pipeline that contains this strange result: you have a clear indication that test run failed (1), but the overall build is green, both the entire build (2) and the single stage (3).

I’ve started blogging in English in 2007 and clearly the choice was WordPress.

I have a library that is entirely written in.NET core that deal with some self signed X509 certificates used to encrypt and digitally sign some data.

I have a pipeline that worked perfectly for Years, but yesterday a build failed while uploading artifacts, I queued it again and it still failed, so it does not seems to be an intermittent error (network could be unreliable).

I’m a strong fan of Azure DevOps templates for pipelines because it is a really good feature to both simplify Pipeline authoring and avoid proliferation of too many way to do the same things.

My dear friend Matteo just published an interesting article on integration between GitHub actions and Azure Devops Pipeline here.

Some days ago I’ve blogged on how to release projects on GitHub with actions, now it is time to understand how to do a similar thing in Azure DevOps to build / test / publish a.NET core library with nuget.

Today I cloned in my workstation a.NET core application that works perfectly on my laptop, but when I started it I got this error An attempt was made to access a socket in a way forbidden by its access permissions I’ve spent almost 10 minutes to find why…

One of the nice aspect of GitHub actions is that you can automate stuff simply with command line tools.

A similar post was made lots of time ago, but since this is always an hot topic, it is probably the time to refresh with new UI and new concepts of Azure DevOps.

GitHub action is perfect to automate simple build workflow and can also be used to publish “releases” of our software.

If you read my old post about how to create a simple program that can manage Windows Firewall to open ports with a simple udp request you surely got disappointed by the complete lack of security in the request.

New configuration system of.NET core is really nice, but it does not works very well with arrays, I have a configuration object that has an array of FirewallRules 1 public FirewallRule[] Rules { get; set; } This rule is simply composed by four simple pr…

GitHub actions is really new kid on the block and even if I still prefer Azure DevOps pipelines, because they are really more production ready, GitHub actions is rapidly evolving.

It could happen, sometimes, that when you create a pipeline in Azure Devops at first run you got the following error.

I have a nice GH action that runs some build and test on my project, now I noticed that some of the latest runs have some problem.

I have some projects that needs SqlServer and MongoDb or ElasticSearch to run some integration tests, these kind of requirements made difficult to use hosted agent for build (in Azure DevOps) or whatever build system you are using where a provider gives y…

In part 2 we continued our journey to prevent malicious users to receive dangerous data, limiting customer id to be a 5 letters string value.

Azure DevOps is a big product and often users start using it without fully explore all the possibilities.

After we fixed our code in part 1 of this serie, we continue to expand our API adding a method to select a Customer.

It is time to start blogging a little bit about security, because injection is still high in OWASP TOP 10 and this implies that people still trust their users.

Thanks to Docker Compose, I can spin off an agent for Azure Devops in mere seconds (once you have all the images).

DevOps is becoming a buzzword, it makes hype and everyone want to be part of it, even if he/she does not know exactly what DevOps is.

I have a small office with some computers and servers and since I’m a fan of Zero Trust Security, I have firewall enabled even in local network.

I’ve dealt in the past on using Docker for your Azure DevOps Linux Build Agent in a post called Configure a VSTS Linux agent with docker in minutes and also I’ve blogged on how you can use Docker inside a build definition to have some prerequisite for tes…

In a previous post I’ve showed Credential Scanner, a special task part of Microsoft Security Code Analysis available in Azure, today I want to have a quick peek at Anti Malware scanner task.

Azure DevOps has an integrated feed management you can use for nuget, npm, etc; the feed is private and only authorized users can download / upload packages.

Without any doubt, Hydra is one of the best tool to bruteforce passwords.

I’ve received today a notification from https://haveibeenpwned.com/ because one of my emails was present in a data breach.

Microsoft Security Code Analysis contains a set of Tasks for Azure DevOps pipeline to automate some security checks during building of your software.

It is not uncommon to have installed many versions of.NET core framework, especially after many Visual Studio updates.

Sometimes having a few lines of PowerShell in your pipeline is the only thing you need to quickly customize a build without using a custom task or having a PowerShell file in source code.