Alfred Berg
LightNews LightNews
berg.hf.ax
Alfred Berg
@berg.hf.ax
930 followers 270 following 12 posts
security enthusiast | space | F1 | bikes
Posts Replies Media Videos
berg.hf.ax
The tj-actions supply chain attack is kind of wild. The target seems to mainly been coinbase
unit42.paloaltonetworks.com/github-actio...
Diagram describing the tj-actions supply chain attack. The attacker jumped through 5 repositories to finally target coinbase
April 3, 2025 at 6:54 PM
berg.hf.ax
Here is a docker trick I use a lot:

It is easy to access the file system of the docker containers through /proc/[pid]/root/, this makes it easy to run tools not available in the container, copy and edit files etc.

This is especially useful for hardened containers
Getting the main process pid of a docker container with "docker inspect httpd | jq .[0].State.Pid" and then navigating to the processes root file system with "/proc/[pid]/root"
January 26, 2025 at 6:43 PM
berg.hf.ax
Needed to find both really common apex domains and uncommon apex domains in a recent project of mine.

Created a small tool to just this by looking up each apex domain against the Tranco list (list of the 4.7m most common domains) and showing the rank.

It is available at github.com/AlfredBerg/d...
An example of the tool being used. A list of domains is passed to the tool. The tool prints the input domain, the resolved apex domain followed by the apex domains tranco ranking. -1 if the domain is not in the tranco list.
November 15, 2024 at 10:46 PM