teleren/devto huggingface dataset:
HackTheBox Write-Ups - An Introduction
Published: 2020-07-02 04:32:12

Hello, internet person,

The time to write my first post here on Dev.to has come! After struggling to think of an idea or really cool and worthy project to start writing some things down, I finally decided to try and write something that was almost done: My write-ups.

A bit of context first: HackTheBox is this awesome platform in which you can try your pentesting skills with some virtual machines - or boxes - packed with some vulnerabilities ready to be exploited. Sounds nice, huh? As a cybersecurity student, it's a must for me to experiment with those labs, especially in order to pursue the OSCP - Offensive Security Certified Professional - a very important cybersecurity certification. 

To be quite honest, I still don't know if I want to take the OSCP as of now... but I understand how taking it and the Advanced Web Attacks Exploitation certification's exam can be really useful to my main goal of developing my developer skills with a good base in Security. So, why not start preparing for it right now, even if in a slower pace?

That being said, after a lot of research and [this awesome story from Rana Khalil](https://rana-khalil.gitbook.io/hack-the-box-oscp-preparation/) about her journey to get her OSCP Cert, I finally had a roadmap. Now, time to follow it.

The targets were finally there, since I decided to follow her footsteps and also try to hack all the machines from [TJ_Null's OSCP-Like VM's](https://docs.google.com/spreadsheets/u/1/d/1dwSMIAPIam0PuRBkCiDI88pU3yzrqqHkDtBngUHNCw8/htmlview#) list. Important to note that those machines are always being updated, which makes this list relevant at all times. Also, he has a list for VulnHub machines, which I might consider every now and then when my HackTheBox subscription gets expired (since I'm not in an automatic subscription, leaving it for when I decide to focus on Retired Machines, only accessible with the VIP account).

Now I have the roadmap and the targets, but... something is still missing: I need to learn how to walk it. Gladly, I found really good tutors in University, but I was a total, complete noob in all things related to pentest, and I still needed a nice place to start. That's where I found [Heath Adam's Practical Ethical Hacking course at Udemy](https://www.udemy.com/course/practical-ethical-hacking/). His methodology just clicked with me. It was way easier to understand the basic concepts, even though I still didn't finish the course - It's paused right now while I write this - because his way of explaining things just inspired me to start this post and all this plan to document my way through TJ_Null's list.

Without further ado, let's go hack some things!
      
## Table Of Contents
   * [Step 0 - Introduction](https://dev.to/manticorevault/hackthebox-write-ups-an-introduction-259b)
   * [Step 1 - Lame](https://dev.to/manticorevault/hackthebox-write-ups-lame-49c)
You can support me via Patreon!
Tags: alphadioproduction, patreon
Published: 2020-07-02 07:44:08

![Alt Text](https://dev-to-uploads.s3.amazonaws.com/i/fkxc25o3bfu6dp2f30yj.PNG)

Howdy, folks! I've decided to use Patreon to receive supports. My game assets for Avirion Chronicles will be available there in a month or so which is exclusive for the USD 100 tier. You can get my games for free if you pick at least the USD 10 tier.
See you around!
Build RESTful APIs Using ASP.NET Core and Entity Framework Core
Tags: net, netcore, c, sql
Published: 2020-10-14 07:19:56

---
title: Build RESTful APIs Using ASP.NET Core and Entity Framework Core
published: true
date: 2020-07-02 07:29:00 UTC
tags: NET,NETCore,C,SQL
canonical_url: http://codingsonata.com/build-restful-apis-using-asp-net-core-and-entity-framework-core/
---

In this tutorial we will learn how to build RESTful APIs using ASP.NET Core. The APIs will be connected to an SQL Server Express Database Instance using Entity Framework Core.

We will be building RESTful APIs for Movies Database; the APIs will be responsible to connect to the database and get/save/update/delete records to and from the database and return the results back to the client.

The post [Build RESTful APIs Using ASP.NET Core and Entity Framework Core](http://codingsonata.com/build-restful-apis-using-asp-net-core-and-entity-framework-core/) appeared first on [Coding Sonata](http://codingsonata.com).
Flutter Web Scraper Level 2: Etsy Product Finder Part 2
Tags: flutter, tutorial, ios, android
Published: 2020-07-02 07:22:39

## Intro

I am showing how to build a etsty product searcher utilizing webscraping in flutter. In the previous part (link here) I showed how to set the ui, and we ended with this

![Alt Text](https://dev-to-uploads.s3.amazonaws.com/i/wdbrw54tolhkeguq02pe.png)

Our goal for this part is to add the url build to make an etsy search and the webscraping of the search results. In the end we will have an app that looks like this:

![Alt Text](https://dev-to-uploads.s3.amazonaws.com/i/sboja5joryrljfv9wybc.png)

## Tutorial Portion

#### 'Please enter search' text

The first thing we will add is a loading indicator for when we are not searching. For this

 in home_screen.dart we add:

{%gist https://gist.github.com/Mattds825/0d639ffcdf27fde8ede367c1bf16f2bb %}

#### Webscraping Time

In results_list.dart we are going to add the changes to scrape the products from Esty's page. I will just add the code for the new result_list.dart file and explain some of the most important lines bellow:

{%gist https://gist.github.com/Mattds825/9f51b860c92923c58aeece4fa250a6d5 %}

First, in lines 11-12, we have a boolean to check if the webscraping has loaded, and a list of result items that we will be adding to the list.

Lines 14 is the the main Estys url and line 15 is the particular page we will be searching.

We have an initState function that calls the async getData() function.

getData() is the function where we will be scraping the page. First we initialize a new WebScraper variable that has the estyUrl.  Then in an if statement we check if the webpage we chose gets loaded. For the webpage in line 27, you can see that we have to construct the URL, by adding the search onto our pageExtenstion. The '.trim().replaceAll('  ', '%20')' portion is to make sure that if we have spaces in our search we are trimming them and changing any space between words to '%20' which is the standard that Etsy uses.

Then we create three List<Map<String, dynamic>> to get the images, descriptions, prices, and URLs. The tags used in the getElement() call were found using the web inspector in chrome on the Etsy page

![Alt Text](https://dev-to-uploads.s3.amazonaws.com/i/gp7ds7zbrduznbippmk5.png)

We the iterate through one of the lists (in this case I chose images) and custruct our ResultItem then add it to the list.

Once all this is done we call setState() and set loaded to true so that the results list will be show.

And that's it!

Now if you run it you should get the end product

![Alt Text](https://dev-to-uploads.s3.amazonaws.com/i/sboja5joryrljfv9wybc.png)

## Conclusion

I hope this projust tought you how to search and scrape html pages to display them in a list to users. This is a great idea if you want to create a comparison searcher, you could then scrape two websites and display all the result.

In a future post I will also be showing how to scrape Javascript website, something that is a bit more tricky and requires more setting up, so stay tuned to for that one if you are interested.
Tinkering Around
Tags: devjournal, womenintech, codenewbie
Published: 2020-07-02 07:19:48

_This post was originally published on July 2, 2020 on [my blog] (https://alexlsalt.github.io/blog)._

Hi friends - hope you're doing well this morning!

Yesterday was such a wonderfully productive day - I kind of felt like that gif of that cat tapping away wildly at the computer - you know which one I'm talking about!

As I mentioned, I'm practicing constraining all podcast production work to one day of the week so that I don't get bogged down with it all the other days. I think it'll be good - looking forward to seeing how it works out.

I'm feelin' good! Today I'm planning on making a few phonebanking calls to help get out the vote, going for a nice long walk, and working a few solid hours on my JavaScript course on Udemy.

Tomorrow I'm going to start getting my bearings on working with Eleventy as a static site generator. I'm wanting to use it to transfer one website I have ([So You Think You Can France website] (https://soyouthinkyoucanfrance.com)) over from Squarespace to being one I host on my own and built with Eleventy.

Eventually, I'll also probably end up building a more full-service [Ladies Code Collective site] (https://www.ladiescodecollective.com/) with Eleventy. I was considering going with Squarespace for that instead, but after a bit of tinkering yesterday (in Squarespace), I just wasn't happy with not having the most control over all functionality of the site, so I'm probably going to go that one alone as well.

Disclaimer: I'm a huge fan of Squarespace for out-of-the-box functionality, especially when you don't have too much experience yet with developing your own sites. I think, though, that at a certain point, it becomes a bit too limiting when you want to be able to have a hand in all parts of developing your own websites.

I think that's all from me for today! Have a good one and just remember to put one foot in front of the other - step by step, breath by breath.


Thanks so much for reading along! [Now let's be friends over on Twitter >>] (https://twitter.com/alexlsaltt)

P.S. I've launched a brand-new podcast! Stay up to date by [signing up for the newsletter here >>] (https://www.ladiescodecollective.com/)
Understanding Istio: part 14 – Authorization with JWT
Tags: kubernetes, devops, docker, beginners
Published: 2020-07-02 07:06:07

---
title: Understanding Istio: part 14 – Authorization with JWT
published: true
description: Serie of sketchnotes about Istio. Explaining in a visual way Istio principles.
tags: Kubernetes, DevOps, Docker, beginners
series: Understanding Istio in sketchnotes
cover_image: https://dev-to-uploads.s3.amazonaws.com/i/pi09wy15righn64iwz80.jpg
---

Understanding Cloud technologies, like Kubernetes, can be difficult or time-consuming. In order to spread knowledges about it, I started to create [sketchnotes about Kubernetes](https://dev.to/aurelievache/kubernetes-sketchnotes-pods-4ib0) and know it's time to talk about a perfect companion of Kubernetes, a service mesh, Istio.

We continue our new serie of Sketchnotes about Istio, with a sketchnote about authorization with JWT.

![Alt Text](https://dev-to-uploads.s3.amazonaws.com/i/pi09wy15righn64iwz80.jpg)
![Alt Text](https://dev-to-uploads.s3.amazonaws.com/i/jd9bdvcrfftpl4fdelnb.jpg)
![Alt Text](https://dev-to-uploads.s3.amazonaws.com/i/pn8x9eixk6c91xjvujaq.jpg)
![Alt Text](https://dev-to-uploads.s3.amazonaws.com/i/tgjmt9x9zy7doodpjv97.jpg)
![Alt Text](https://dev-to-uploads.s3.amazonaws.com/i/8ocum34nk4c118tqkf9y.jpg)
![Alt Text](https://dev-to-uploads.s3.amazonaws.com/i/l5sztkhv1nj5hspnnnwe.jpg)

If you are interested, I published a book with all the sketchnotes on Istio (and new ones!): ["Understanding Istio in a visual way"](https://gumroad.com/aurelievache#vJYhM).

As usual, if you like theses sketchnotes, you can follow me, and tell me what do you think. I will publish others sketchs shortly :-).
Apple Introduces iOS 12 - Seven Key Features to Know
Published: 2020-07-02 06:59:32

The Cupertino Company Apple has introduced the latest version of iOS as iOS 12 in the most recent WWDC 2018 event, held between June 4 to June 8 in San Jose Convention Center. Most of the iOS app developers were of the opinion that the upcoming version would focus more on performance and less on new features. But, the company has succeeded in maintaining a subtle balance between both features and performance in iOS 12.
<a href="https://www.makeourmoments.com/tour/munnar-day-tour/">MOM</a>
The things I noticed in mysterious  project
Published: 2020-07-02 06:23:36

# Tech

## DB design

### Don't use binary format tool like MySQL Workbench
It's not easy to share a binary file in a team or VCS.

### Design tables incrementally
Create only the tables that we can know so far. Do not spend time to create entire system tables by estimating the future of the tables. But we should make a sequence diagram of our business at the beginning.

### Use plural or singular table name for

Plural or singular is not essential. But we should decide which one we use at first.

## Architecture design

### Don't use an architecture that is over-engineering
We should not use a big architecture like [the Clean Architecture](https://blog.cleancoder.com/uncle-bob/2012/08/13/the-clean-architecture.html) at the beginning. That is just wasting your team's time.

### Protocol Buffers
We used Protocol Buffers initially, but I think It was over-engineering because we just created a web service that doesn't have special tech. It was enough to use JSON format for communicating between and front-end and back-end.

## CI and CD
We should prepare an app for checking an overview of it by business members at the first beginning. To reduce uncertainty.
Updating prototyping and web pages.

## Remote work
Our all team members worked from home and used Zoom and Discord. We use Zoom for only video and Discord for only voice chat. There are great communication tools so far. We feel as if we work at an office together. We don't have any walls between us.

## research what tech we use

##  update our workflow and diagram constantly
Use a sequence diagram on the web, not a local file. It's easy to collaborate.
paper prototyping -> write detail in Figma

### model
Create a specific model for requesting and receiving data, not use entity.

### Create a prototype view
Share your app's prototype and discuss it with your team. Prototyping should not be costly to create and share.

### Updating prototype for accuracy


# Project management

## Set a final goal and deadline and make a plan to get there in time. Use the milestone in GitHub to make small goals.

Iterate this
1. create specs
1. data structure
1. create app
1. launch

Stakeholders can check this app

### create issues by the members want/suggestion

### Use the Milestone and Project in GitHub.

We should not put pressure too much on members.
Don't do use complex project management schemes and tools like the Scrum in a small team.

### we should share our goal

# Team

### communication
We should have an environment that makes us easy to communicate each other anytime.

### respect our team members
Azure Pipelines Triggers - Container Registry
Tags: devops, pipelines, docker, containers
Published: 2020-07-02 06:16:03

As you probably know, Azure Pipelines supports __many types of triggers__, and sometimes it may be a little confusing. 

This is why I've decided to create this mini-series dedicated to Triggers. And today we are going to talk about the __Container Registry trigger__, which allows to you run a Pipeline every time a new container image is pushed to __Azure Container Registry__ and __Docker Hub__.

### Classic vs YAML

I'll focus first on the __Classic__ Release Pipelines, using the UI, because setting up the trigger is easier and it supports both the _Azure Container Registry_ and _Docker Hub_.

For the Multistage __YAML__ Pipelines, instead, we can achieve ___almost the same___ using the YAML triggers, but the trigger is currently available only if you're using Azure Container Registry. It is not available for Docker Hub. But stay with me until the end because ___I have a workaround for you for triggering from Docker Hub___.

To be able to trigger a Pipeline run whenever a new container image is pushed to your registry, we need to use a Resource. If you are not familiar with Resources, they are basically anything used by a pipeline that lives outside the pipeline.

Those can be other pipelines, repositories, packages and of course containers images.

### The Video

Enjoy the watch!

{% youtube FHnPJ8FBjLM %}

### Conclusion

I think that this is pretty cool, especially now that a lot of developers have their applications containerized.

And being able to trigger also from Docker Hub, as I've shown, it is pretty handy.

What do you think? How do you trigger your deployments of container images?

### References and Links

- [Video on Pipelines Environments](https://youtu.be/gN4j65w7wIM)
- [Video on Pipelines Environments for Kubernetes](https://youtu.be/qBO5-xINmSs)

__Like, share and follow me__ 🚀 for more content:

[YouTube](https://www.youtube.com/CoderDave)
[Patreon](https://patreon.com/CoderDave)
[Merch](https://geni.us/cdmerch)
[Facebook page](https://www.facebook.com/CoderDaveYT)
[GitHub](https://github.com/n3wt0n)
[Twitter](https://www.twitter.com/davide.benvegnu)
[LinkedIn](https://www.linkedin.com/in/davidebenvegnu/)
[Podcast](https://geni.us/cdpodcast)
It all begins from Abacus
Tags: beginners, computerscience, codenewbie
Published: 2020-07-02 06:14:58

For me, starting out as a total beginner was getting to grips with the whole 1 to 10 numbering system and "*transforming*" it to 0 to 9. Therefore, for me to understand this, I took a look at the abacus, an adder.
{% wikipedia https://en.wikipedia.org/wiki/Abacus %}

Tracing it's origins dating back 5000 years, I saw there is no number 10. It begins from 0 and ends with a 9, for creating the number 10, you need two lines - 1 + 0 which effectively reads as 10. Here lies the origins of the computer system and all it's science associated with it. 

As I embark on my degree-less journey to computer science. It is important to debunk some of the myths surrounding this field of science, which I observed during my research. 

**1. Mythbuster - You must be mathematical genius**

Contrary to what most people, no you DON'T have to be mathematical genius. Any person, from the street, clever, idiot, foolish or anyone who you might think can do computer science. The only thing what matters is the *thinking mindset*, I will come to this a bit later. 

**2. Mythbuster - You become a *computer engineer* by getting an engineering degree!**

No you don't!, the main reason is that computer science is *applied science*, which means you need to apply what you learnt during your *course* at a university or a college. I know many engineers who call themselves *engineers*, and yet don't know how to code properly or think analytically. 

**3. Mythbuster - You *think you are an engineer* by randomly start learning some programming language, *just because* it's the most popular language.**

Again this is not true! and let me explain, learning a language (be it C, Python, English, Japanese, Russian, Hindi, C++, etc..) is one thing, and *applying* it in reality is **quite another thing**. The most important thing is what can you do with it, and this will effectively command your respect and income with employers and peers. It's like saying I can speak English, by learning from some English grammar book, but I cannot hold conversations in English!. The same principle applies in computer language as well. Our brain uses the simple principle in learning, there is absolutely no difference either learning physical language or computer language, for your brain it's the same thing. If you are *good* in whatever *language* you learnt, you be employable. 

For me, it is important to understand the very basics of computers, i.e., getting down to 0s and 1s and understand *how* they work and how I can work with them. In the next section I will outline my learning process and roadmap. 

Please feel free to add your viewpoints in the comments below.
Add Authentication Behind Your Sidekiq Dashboard (or any route)
Tags: rails, ruby
Published: 2020-07-02 06:11:41

If you need to add authentication behind your Sidekiq dashboard, then you can add the following to your `routes.rb` file.

```ruby
  scope :monitoring do
    Sidekiq::Web.use Rack::Auth::Basic do |username, password|
      ActiveSupport::SecurityUtils.secure_compare(::Digest::SHA256.hexdigest(username), ::Digest::SHA256.hexdigest(ENV["ADMIN_USERNAME"])) &
        ActiveSupport::SecurityUtils.secure_compare(::Digest::SHA256.hexdigest(password), ::Digest::SHA256.hexdigest(ENV["ADMIN_PASSWORD"]))
    end

    mount Sidekiq::Web, at: '/sidekiq'
  end
```
You can set the required username and password by updating the environment variables `ADMIN_USERNAME` and `ADMIN_PASSWORD`.

Then, whenever you visit `localhost:3000/monitoring/sidekiq`, you'll be able to see a nice dashboard with details about your background jobs. Woah, beautiful!

If you're using something like Devise, then it's even easier. Add the following to your `routes.rb`.

```ruby
authenticate :user, lambda { |u| u.has_role? :site_admin } do
    mount Sidekiq::Web => '/sidekiq'
    get 'user_list' => 'pages#user_list'
  end
```

As you can see above, it's straightforward to add any route behind the authentication.

Hope this pattern helps. Happy coding.
Opinionated Tips for Maintainable Rails Applications?
Tags: rails, webdev, css, javascript
Published: 2020-07-02 06:07:43

What opinionated tips do you have when it comes to creating maintainable web applications?

Just over a year ago I wrote [a post on medium](https://medium.com/@unathiunc/5-opinionated-tips-for-creating-a-maintainable-rails-application-bae9d0c0f16b) which covered the following 5 core points.

1. Creating & maintaining a living style guide
2. Enforcing consistency in stylesheets
3. Keeping your models skinny
4. Keeping your controllers skinny
5. Keeping your JavaScript simple

**The full post for a deeper look into each point:**
{% medium https://medium.com/@unathiunc/5-opinionated-tips-for-creating-a-maintainable-rails-application-bae9d0c0f16b %}

--

I would like to hear from other experienced web developers on maintainability tips that they think are evergreen.
💡 GitHub Sponsors and dev.to posts
Tags: discuss, github, sponsors, meta
Published: 2020-07-02 05:52:51

---
title: 💡 GitHub Sponsors and dev.to posts
published: true
description: GitHub Sponsors could be leveraged on dev.to to generate revenue 
tags: discuss, github, sponsors, meta
cover_image: https://dev-to-uploads.s3.amazonaws.com/i/qdp4swhb2kngx4cmsowd.png
---


Yesterday, I read [a blog post by Caleb Porzio](https://calebporzio.com/i-just-hit-dollar-100000yr-on-github-sponsors-heres-how-i-did-it) about making money from Open Source projects, in particular by leveraging the GitHub sponsors program.

His conclusion is that the best way to use GitHub Sponsors is to make both free and paid educational content, such that free content attracts an audience, and then they want to support you to access the advanced, paid, content.

It seems to me that the DEV community, being already connected to GitHub, would be a perfect place to implement this idea.

There could be a tag in the meta parameters of a post, which would restrict its access (fully or partly, e.g. by hiding the end of the article like lots of newspapers do) to the author's GitHub sponsors:

```
# Restrict to sponsors of the raphink GitHub account
restrict_sponsors: raphink
# Restrict to sponsors of tier $10 or above
restrict_sponsors: raphink/10
```


What do you think? Is that a feature that would be interesting for the DEV community?
Has VS Code got worse recently?
Tags: vscode, ide
Published: 2020-07-02 05:30:03

While screen sharing today, a colleague commented that it seems like VS Code has got less stable in recent weeks - and that does appear to be the case. 

Issues are mainly around: 

- Linting (Linter failing to fire and requiring a VSCode restart)
- Whatever you call it when you can mouse over something for information, or CTRL/CMD + click to follow through it. 

Anyone else experiencing this? Or is there some kind of code decay that would cause this?