Ruby for DevOps: auditing the Windows Print Spooler attack surface — and testing Windows-only code on Linux
the shed // windows hardening The spooler runs as SYSTEM on every Windows box you own, including your domain controllers....
Cybersecurity
Ruby for DevOps: a pure-Ruby ELF auditor for RPATH hijacking and the hardening flags your build pipeline forgot
the shed // binary security A world-writable directory in a SUID binary’s RPATH is a local root. Here is a...
Ruby for DevOps: auditing the Linux MAC posture — finding the listening daemons AppArmor and SELinux never mention
the shed // linux hardening Your host says AppArmor is enforcing and twelve profiles are loaded. Three of the six...
Ruby for DevOps: Auditing the Windows Name-Resolution Attack Surface (LLMNR, NetBIOS, mDNS, WPAD, SMB1) with WMI and the Registry
the shed // windows // credential relay LLMNR, NetBIOS-NS, mDNS and WPAD are the four ways a mistyped hostname becomes...
Ruby for DevOps: Finding the Files Nobody Owns — an Orphaned-UID Audit That Ranks by Risk and Writes the chown
the shed // linux // accounts When an account is deleted its files keep the uid, and the next useradd...
Ruby for DevOps: Auditing /etc/exports and exportfs for the NFS Options That Hand Out Root
the shed // linux // nfs One no_root_squash on a wildcard client turns a file server into a root shell...
Ruby for DevOps: Auditing Windows RDP Hardening from the Registry (NLA, TLS, Timeouts, Firewall Scope)
the shed // ruby x windows // security Exposed Remote Desktop is still the most common way ransomware gets in....
GitHub Copilot CLI Tutorial: 7 DevOps and Security Workflows
Install GitHub Copilot CLI, then use plan mode, custom agents, hooks, and headless CI runs for 7 practical DevOps and...
Cursor Tutorial: 7 Agent Workflows for DevOps & Security
Cursor in 2026 is an agent platform. Rules, hooks, headless CLI audits, worktrees, and Bugbot: 7 workflows DevOps and security...
Ruby for DevOps: Triage Windows Event Logs with WMI
the shed // ruby x devops Someone brute-forced Administrator overnight and a mystery service appeared at 10am. It’s all in...