http://tvmmonkey.com/ Recent content on TVM Monkey Hugo -- gohugo.io en-us Sun, 09 Jan 2022 12:59:34 -0600 http://tvmmonkey.com/posts/log4j-tenable-data-transformation-java/ Sun, 09 Jan 2022 12:59:34 -0600 http://tvmmonkey.com/posts/log4j-tenable-data-transformation-java/ 2022-01-24 - Now parses and transforms embedded “note” messages from tenable Two pass java implementation of this tenable data transformation solution. Info and requirements: must run java 1.8 or greater 2 pass solution reduces memory footprint leverages gradle builds an executable jar with all required libraries for easy execution requires apache commons-csv cross platform Download the Executable jar file Download the source code file Here’s how to compile and run the code: http://tvmmonkey.com/posts/log4j-tenable-data-transformation/ Sat, 01 Jan 2022 21:23:23 -0600 http://tvmmonkey.com/posts/log4j-tenable-data-transformation/ If you use Tenable’s excellent Nessus vulnerability scanner, you’re probably familiar with the “Plugin Output” payload in their default reports. Many plugins aggregate findings in this payload and it’s sometimes convenient to parse them out. For example, the current log4j Nessus plugins aggregate many vulnerable jar/ear/war/zip files in what I call a “path group” which is a series of key : value pairs grouped together and separated by newlines: This finding aggregation can be incredibly inconvenient for remediators, people creating reports, security folks documenting risk, etc as they need to manually review the multiline payload. http://tvmmonkey.com/about/ Mon, 12 Jul 2021 23:29:36 -0500 http://tvmmonkey.com/about/ The monkey has awakened. Security brain dump commencing. bleep bloop. http://tvmmonkey.com/license/ Mon, 12 Jul 2021 23:02:12 -0500 http://tvmmonkey.com/license/ The MIT License (MIT) Copyright © 2021 Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the “Software”), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: http://tvmmonkey.com/attributions/ Mon, 12 Jul 2021 22:56:56 -0500 http://tvmmonkey.com/attributions/ Thanks to the following projects: http://gohugo.io https://github.com/parsiya/hugo-octopress/ License license http://tvmmonkey.com/posts/hello-world/ Mon, 12 Jul 2021 22:50:59 -0500 http://tvmmonkey.com/posts/hello-world/ well hello there.