Mobile application security
Creating mTLS reverse proxy with Ktor
If you like to integrate with external security systems, then you have probably come across such a thing as Mutual TLS (also known as TLS mutual authentication or mTLS). There is nothing particularly difficult in such integration. Except for two nuances:
- Integration will have to be done in each service
- In each service you need to put client certificates for passing the mTLS handshake
And if you can somehow live and put up with the first nuance, then the second already causes much more problems and leads to sad faces of your security team. To make them happy again, and at the same time eliminate the need to write the same code in each service, can be made by a smart reverse proxy, which will take all the hardships and hardships handshake related and possibly some other additional logic. We will do this farm on Ktor, because why not;)
To make them happy again, and at the same time get rid of the need to write the same code in each service, we will write a smart reverse proxy which will take care of all hardships associated with an mTLS handshake and other security logic. I will implement all these things with Ktor, because why not ;)[Read More]
Installing Drozer on macOS Catalina
In general, I don’t use Drozer. And using this tool on macOS is unusual for me. If I do some “pentest things” I just take my Kali Linux with pre-installed Drozer and use it there. But the day has come, and I decided to install Drozer on my macOS. It was a real hell =)
I spent a lot of time trying to make it work. Eventually, I had to rewrite a piece of class loader script… A living hell! When everything started working right, I came up with a better way of installing Drozer on macOS and removed all this stuff . In fact, there are two good ways to do it. The Docker-way and the following one[Read More]
Elemental Design Patterns (book). My review and notes.
Recently, I read this book and want to share my thoughts about it with you.
If you already know about GoF and their Design Patterns then the book will be a godsend for you. The author (and his team) did a great job to spread out GoF’s patterns into tiny, elemental patterns and to present the result to us. Why is it significant? It helps to understand the “big patterns” better and even build your own patterns.
To tell the truth, the first half of the book seemed to me very boring. A lot of reasoning about “the meaning of life” and etc. I even wanted to stop reading it. Then I understood what this book is really about and read it from cover to cover.[Read More]