For years I have felt that if you are offering a public API it should be documented well enough for consumers to generate a client library in whatever language they are using, it is almost implausible to create client libraries in all languages your consumers might use, but a good OpenAPI definition allows consumers to understand an API and use tools to generate client libraries. Over the years I have worked with NSwag, which was good but put all the code in 1 file which I didn't like. AutoRest, which seemed to get more difficult to work with when V3 was released, so I looked around again and found OpenAPI Generator, which is great but needs Java. With the release of Kiota I was excited to look at how a dotnet tool could tackle the same requirement. ## What is Kiota? Kiota is a client generator for OpenAPI and was introduced at .NET Conf 2023.

What is zakwas and żurek?​

csharp SAST with Semgrep ### Installation Run sudo apt-get update && sudo apt-get upgrade because it is good for you. https:/semgrep.devdocsgetting-started/ ### The command semgrep scan --config=auto​

Initial setup​

Lateral Movement and Pivoting This is a Try Hack Me premium room so to access it you will need a subscription, if you don't have one go get one with my Referral Link ### Task 1 - Introduction In this room, we will look at lateral movement, a group of techniques used by attackers to move around the network while creating as few alerts as possible. We'll learn about several common techniques used in the wild for this end and the tools involved. * Familiarise yourself with the lateral movement techniques used by attackers.​

Sourdough Starter Last time I was back in England Mum gave me one of Dad's books "<a target="_blank" href="https:/www.amazon.deSlow-Dough-Secrets-Amazing-Long-Risedp184899737X?&_encoding=UTF8&tag=markzither-21&linkCode=ur2&linkId=ba2b851e0628e75ee2306a26a5e99a76&camp=1638&creative=6742">Slow Dough: Real Bread" (affiliate link! buy it!). ### Day One ### Day Two ### Day Three ### Day Four​

Password Attacks This is a Try Hack Me premium room so to access it you will need a subscription, if you don't have one go get one with my Referral Link ### Task 1 - Introduction This room is an introduction to the types and techniques used in password attacks. We will discuss the ways to get and generate custom password lists. The following are some of the topics we will discuss: * Password profiling​

Redline This is a Try Hack Me premium room so to access it you will need a subscription, if you don't have one go get one with my Referral Link ### Task 1 - Introduction #### Question 1 Who created Redline? #### Answer​

Hacking with PowerShell This is a Try Hack Me premium room so to access it you will need a subscription, if you don't have one go get one with my Referral Link ### Task 1 - Objectives Start the machine, that's it. ### Task 2 - What is Powershell? PowerShell verbs #### Question 1 What is the command to get a new object? ##### Notes This confused me because the command is not a real command, just an example of how command naming works in PowerShell. Running the command in PowerShell results in ``` powershell​

OpenVAS​

This is a Try Hack Me premium room so to access it you will need a subscription, if you don't have one go get one with my Referral Link

Task 1 - 6 Introduction​

Read tasks 1 - 6 for an introduction to OpenVAS and instructions on setting it up. As I already have a dedicated Kali VM running I went for the Install from KaliOpenVAS repositories approach and use the Install from KaliOpenVAS repositories guide, as of June 2023 it seems to just about work, I found some extra details on [Ceos3c - Install OpenVAS on Kali Linux] (https:/www.ceos3c.comsecurityinstall-openvas-kali-linux). Additional steps were