CVE-2014-0160 Heartbleed exploit using OpenSSL s_client with -tlsextdebug flag to extract up to 64KB of server heap memory per heartbeat request. Tested on Ubuntu 22.04, Debian 12, Kali Linux. #cve #heartbleed #ValtersIT

https://www.valtersit.com/vault/cve20140160-heartbleed-memory-dump-extraction-via-openssl-ffe2d0/

Need consistent MongoDB replica set backups? Use mongodump with --oplog for point-in-time consistency. Connects to primary, captures writes during dump, writes BSON files, and compresses with gzip. Works on Ubuntu 22.04, CentOS 7, RHEL 9. #database #snippet #mongodb #mongodump #ValtersIT

https://www.valtersit.com/vault/mongodb-replica-set-backup-with-mongodump-and-oplog-270774/

Multi-stage Docker build for Rails 7: precompile assets with Yarn in stage 1, copy only essentials to slim Ruby image. Cuts final image size by excluding dev gems and build tools. #docker #ruby #rails #ValtersIT

https://www.valtersit.com/vault/ruby-on-rails-with-asset-precompilation-and-yarn-f54291/

Automate Elasticsearch index transitions with a hot-warm-cold-delete ILM policy. Triggers rollover at 50GB, then shrink, force merge, and freeze by age thresholds using a state machine. Phases: hot → warm (min_age) → cold → delete. #elasticsearch #ilm #ValtersIT

https://www.valtersit.com/vault/elasticsearch-index-lifecycle-hotwarmcolddelete-policy-1a23e4/

ZFS deduplication (dedup) saves space but eats RAM. Run DDT checks with zdb -D, identify duplicate blocks via awk, then delete/recreate dataset with dedup=off to clean up. Proxmox/FreeBSD compatible. #zfs #snippet #deduplication #storage #ValtersIT

https://www.valtersit.com/vault/zfs-deduplication-verification-and-cleanup-script-449f7b/

Exploit Heartbleed (CVE-2014-0160) with OpenSSL s_client: send a malformed heartbeat request with oversized payload length to extract up to 64KB of heap memory. Use -no_ssl3 -no_tls1 for TLS 1.0/1.1, -msg to capture leaked data. #cve #snippet #heartbleed #cve-2014-0160 #ValtersIT

https://www.valtersit.com/vault/heartbleed-memory-extraction-via-openssl-sclient-80ed4a/

ZFS native encryption with AES-256-GCM protects data at rest using a master key secured by passphrase. Each block gets a derived key. High throughput on modern CPUs with AES-NI. #zfs #encryption #ValtersIT

https://www.valtersit.com/vault/zfs-encryption-at-rest-with-native-dataset-encryption-a776b9/

Running BGP between ZeroTier and your physical router? This snippet configures VyOS to redistribute ZeroTier subnets via iBGP using FRR, making zt0 routes available to your local network. Full config at #zerotier #snippet #bgp #vyos #ValtersIT

https://www.valtersit.com/vault/zerotier-route-redistribution-via-bgp-on-vyos-2c3ef2/

Stop false positives in ClamAV. Use signature-based exclusions to whitelist specific files without disabling detection. A precise approach for Linux security. #DevOps #Linux #Security #ValtersIT https://www.valtersit.com/vault/clamav-whitelisting-with-signaturebased-exclusions-3f

https://www.valtersit.com/vault/clamav-whitelisting-with-signaturebased-exclusions-3f4284/