Stop Trusting Silent Backups: A Ruby Database Backup Manager That Verifies Itself
the shed // ruby devops // databases A cron job that runs pg_dump > backup.sql is not a backup strategy...
DevOps
Claude Code Automation: 7 Workflows That Run Themselves
Claude Code stops being a novelty once you stop watching it work. Hooks, headless CI, and scheduled routines that run...
Ruby for DevOps: auditing the Windows Print Spooler attack surface — and testing Windows-only code on Linux
the shed // windows hardening The spooler runs as SYSTEM on every Windows box you own, including your domain controllers....
Ruby for DevOps: a pure-Ruby ELF auditor for RPATH hijacking and the hardening flags your build pipeline forgot
the shed // binary security A world-writable directory in a SUID binary’s RPATH is a local root. Here is a...
Ruby for DevOps: auditing the Linux MAC posture — finding the listening daemons AppArmor and SELinux never mention
the shed // linux hardening Your host says AppArmor is enforcing and twelve profiles are loaded. Three of the six...
CrewAI Tutorial: 7 Agent Crews for DevOps & Security
Build CrewAI crews that write incident postmortems, drift reports, and CVE sweeps to disk. Setup, Flow orchestration, 7 workflows, and...
Ruby for DevOps: Auditing the Windows Name-Resolution Attack Surface (LLMNR, NetBIOS, mDNS, WPAD, SMB1) with WMI and the Registry
the shed // windows // credential relay LLMNR, NetBIOS-NS, mDNS and WPAD are the four ways a mistyped hostname becomes...
Ruby for DevOps: Finding the Files Nobody Owns — an Orphaned-UID Audit That Ranks by Risk and Writes the chown
the shed // linux // accounts When an account is deleted its files keep the uid, and the next useradd...
Ruby for DevOps: Auditing /etc/exports and exportfs for the NFS Options That Hand Out Root
the shed // linux // nfs One no_root_squash on a wildcard client turns a file server into a root shell...