Muminjon A.

From Manual WAR #Deployments to Full CI/CD Automation with #Ansible! Not long ago, I used to deploy applications manually - uploading a .war file to the server and restarting the #Tomcat service each time a new build was ready. It worked, but it was slow, error-prone, and definitely not scalable. That’s when I decided to automate the entire process using a CI/CD pipeline integrated with Ansible! Here’s how the new setup works 👇 🔹 Continuous Integration (CI): * Code commits trigger the pipeline. * The application is built, tested, and packaged as a container image or WAR file. * The artifact is stored in a central registry for deployment. 🔹 Continuous Deployment (CD): * Once the build is ready, Ansible takes over. * Using YAML playbooks, it automates: - Copying the new WAR file to the target Tomcat directory - Restarting the Tomcat service - Validating deployment health This end-to-end automation means no more manual steps, faster rollouts, and consistent environments across dev, test, and prod. Why Ansible? * Human-readable YAML syntax * Agentless (SSH-based) and super flexible * Great for hybrid and on-prem environments Lesson learned: Automation not only saves time - it also builds reliability into every release. #DevOps #Cloud #CICD #Ansible #Automation #Tomcat #InfrastructureAsCode #ContinuousDeployment #YAML #GrowInComunity

24

New Article Published: Web App Hacking Lab Step-by-Step XSS Guide for Beginners I just published a new article on Medium where I break down one of the most common web application vulnerabilities, Cross-Site Scripting (XSS), in a way that’s easy to understand and practical for beginners. In this guide, you’ll learn: 🔹 What XSS is and how it works 🔹 How to safely find and exploit XSS in a lab environment 🔹 Practical lab steps using tools like DevTools and Burp Suite 🔹 Different types of XSS and how to test for them 🔹 Tips for defending against XSS as a developer Whether you're new to web application security or sharpening your pentesting skills, this article will help deepen your understanding of how browsers trust input and how attackers can abuse that trust, all within authorized lab environments. 📖 Read more 👉 https://lnkd.in/eRcuf4H3 #cybersecurity #infosec #websecurity #ethicalhacking #XSS #beginnersguide #securityawareness

1

🚨 New Cato CTRL threat brief: React2Shell (CVE-2025-55182) has emerged as a critical vulnerability affecting React Server Components (RSC). Since the vulnerability disclosure on December 3, Cato CTRL - the threat research lab of Cato Networks, observed 10,000+ React2Shell attacks mostly originating from Bulgaria, Germany, Laos, Netherlands, Poland, and United States. The top affected sectors include manufacturing, healthcare, technology, construction, and consumer goods. Read full disclosure in this blog 👉 https://bit.ly/3MspOpq

16

I'm happy to announce the official 1.0 release of E9Patch. E9Patch is a powerful static binary rewriting tool for x86_64 Linux ELF binaries, designed to scale to large, complex programs while producing drop-in replacements with low overhead and no additional runtime dependencies. The project started as research work (PLDI 2020), and saw significant development over 2020-2023. Over time it has matured into a practical tool used in areas like fuzzing, binary hardening, system call interception, and tracing. After roughly five years of iteration (including the last year with no major issues or feature changes) it felt like the right time to call it “1.0”. More broadly, this project reflects how I like to approach research: aiming for ideas that can grow into robust, high-quality systems that people can actually use. Papers are an important part of the process, but for me they're not the end goal, seeing a piece of research mature into a reliable, high-TRL artifact over time is! Prebuilt binaries, documentation, and source are available here: https://lnkd.in/gsYuFXgF Thanks to everyone who's used and contributed to E9Patch, built projects on top of it, filed issues, or provided feedback along the way.

40

*RIP* to our old internal router model qwen3-0.6b-tool-router (March 2026 - not dead, just being retrained) ​ Specialized in: 1. Routing tools 2. Obeying JSON 3. Staying in its lane 4. Being suspiciously useful for 0.6B params 5. Quietly being very fast when it mattered New finetune loading... 🤜 https://lnkd.in/diFcc282

7