Ari Kalfus

Penetration tester and devsecops engineer. @artis3n

Joined on Aug 26, 2017 dev@artis3nal.com https://blog.artis3nal.com

Ari Kalfus

Dec 6 '20

Learn cyber security: TryHackMe Advent Of Cyber

#security #beginners

1 min read

Authentication in Node.js with MongoDB, bcrypt, and JWT web Tokens with cookies 🍪.

Yeah!

Aug 27

Authentication in Node.js with MongoDB, bcrypt, and JWT web Tokens with cookies 🍪.

Please take a look at auth0.com/blog/adding-salt-to-hash... t...

Aug 25

What is Apple thinking?

Alex Stamos (former Facebook head of security) has a really w...

Aug 12

Reducing Docker image size of a Nuxt SSR application

I hit an error with bootstrap-vue trying this on my project a...

May 18

Compounding Competence

Out of curiosity - do you know the difference between EasyMDE...

Apr 12

SSH and SCP with AWS SSM

Ooh, thanks for calling that out

Jan 27

How I removed google analytics and still have good data to analyze

Cloudflare recently released privacy-preserving analytics - e...

Dec 25 '20

localStorage vs cookies: the "tabs vs spaces" sterile debate of web development 🙄

"If someone owns you, someone owns you." There is a LOT of r...

Nov 25 '20

View all 105 comments

Ari Kalfus

Nov 25 '20

Find The Cube

#showdev #security #ctf

3 min read

Ari Kalfus

Nov 9 '20

How is Deno Doing? (Nov 2020)

#node #javascript #deno

4 4

1 min read

Ari Kalfus

Sep 14 '20

Running a Graphical Application from a Docker Container - Simply and Securely

#docker #security

16 min read

Ari Kalfus

Aug 23 '20

Buffer Overflow ASLR Bypass on HackTheBox October - with Metasploit

#pentest #hacking #security #hackthebox

14 min read

Ari Kalfus

Aug 13 '20

Test a Million Supported Systems with Molecule + GitHub Actions Matrix

#actionshackathon #ansible #molecule

3 min read

Ari Kalfus

Aug 13 '20

True CI/CD Pipeline for "Golden Image" AMIs

#actionshackathon #packer #ansible #terraform

2 min read

Ari Kalfus

Aug 13 '20

Automatically Deploy Your Ansible Galaxy Collections

#actionshackathon #ansible

2 min read

Ari Kalfus

Jun 28 '20

Buffer Overflow on HackTheBox Frolic - with Metasploit

#pentest #hacking

14 min read

Ari Kalfus

Jun 28 '20

Writeup: HackTheBox Bank - NO Metasploit

#pentest #hacking

8 min read

Ari Kalfus

Jun 16 '20

What is the difference between yarn and npm these days?

#discuss #javascript #npm #node

38 19

1 min read

Ari Kalfus

Jun 10 '20

SSR apps - obfuscate your code?

#discuss #javascript #vue #react

1 min read

Ari Kalfus

May 24 '20

Writeup: HackTheBox Bastard - NO Metasploit

#pentest #hacking

9 min read

Ari Kalfus

May 23 '20

Writeup: HackTheBox Grandpa and Granny - with Metasploit

#pentest #hacking

3 min read

Ari Kalfus

May 23 '20

Writeup: HackTheBox Arctic - with Metasploit

#pentest #hacking

3 min read

Ari Kalfus

May 23 '20

Writeup: HackTheBox Beep - with Metasploit

#pentest #hacking

8 min read

Ari Kalfus

Apr 12 '20

Hosting a Markdown Wiki For Pentests and Profit

#tutorial #aws #architecture

17 min read

Ari Kalfus

Feb 17 '20

Writeup: HackTheBox Optimum - with Metasploit

#pentest #hacking

3 min read

Ari Kalfus

Feb 17 '20

Writeup: HackTheBox Devel - with Metasploit

#pentest #hacking

4 min read

Ari Kalfus

Feb 9 '20

Writeup: HackTheBox Lame - with Metasploit

#pentest #hacking

5 min read

Ari Kalfus

Feb 9 '20

Writeup: HackTheBox Legacy - with Metasploit

#pentest #hacking

1 min read

Ari Kalfus

Jan 17 '20

Why Quasar? Why Nuxt? Why Vue?

#discuss #vue #javascript

10 6

1 min read

Ari Kalfus

Jan 14 '20

Writeup: SANS Holiday Hack Challenge 2019

#pentest #ctf #security #hacking

16 min read

Ari Kalfus

Nov 23 '19

How AWS's EC2 Instance Metadata V2 Prevents SSRF

#security #cloud #aws #appsec

7 min read

Ari Kalfus

Nov 14 '19

What API documentation generator/tool do you use?

#discuss #documentation

81 39

2 min read

Ari Kalfus

Nov 12 '19

Galaxy Collections Part 3: Integration Tests with Molecule

#showdev #devops #ansible #development

4 min read

Ari Kalfus

Nov 3 '19

Galaxy Collections Part 2: Automatically Update Your Collection with Github Actions

#showdev #devops #ansible #github

16 min read

Ari Kalfus

Nov 3 '19

Galaxy Collections Part 1: Extending Ansible through Custom Plugins

#showdev #devops #development #ansible

16 min read

Ari Kalfus

Sep 28 '19

Writeup: Derbycon 9: Bank of America CTF

#pentest #security #ctf #hacking

34 min read

Ari Kalfus

Nov 13 '18

Who's Using Isolates? (Cloudflare article)

#discuss #webdev #cloud #container

10 5

1 min read

Ari Kalfus

Nov 6 '18

Demystifying SOP and CSP, featuring CORS

#security #appsec #webdev

11 min read

Ari Kalfus

Oct 15 '18

How do you authenticate your users?

#discuss #security #webdev

6 10

1 min read

Ari Kalfus

May 26 '18

Encrypting Files in a Post-PGP Age

#crypto #security #encryption

24 3

5 min read

Ari Kalfus

Mar 2 '18

Post-Quantum Cryptography, Part 2: Supersingular Isogenies

#crypto #quantum

6 min read

Ari Kalfus

Oct 21 '17

Post-Quantum Cryptography, Part 1: Quantum Computing

#crypto #quantum

27 3

7 min read

Ari Kalfus

Aug 27 '17

Random vs. Pseudorandom

#crypto #encryption #security

41 2

9 min read

DEV Community is a community of 756,027 amazing developers

Recent comments

Authentication in Node.js with MongoDB, bcrypt, and JWT web Tokens with cookies 🍪.

Authentication in Node.js with MongoDB, bcrypt, and JWT web Tokens with cookies 🍪.

What is Apple thinking?

Reducing Docker image size of a Nuxt SSR application

Compounding Competence

SSH and SCP with AWS SSM

How I removed google analytics and still have good data to analyze

localStorage vs cookies: the "tabs vs spaces" sterile debate of web development 🙄