~/talk

Using Python, Flask and Docker To Teach Web Pentesting

Talkat PyCon AU 2019 · 2019-08-02..08-06· [security, python]
links:none on file
name:Carey Li
links:none on file
slides:none on file

Course infrastructure hosts 65 independent Dockerized sites for about 70 students, built with Python, Flask, Postgres, Docker and cookiecutter and orchestrated by docker‑compose, logging into Elasticsearch and auth via Keycloak. Middleware blocks noisy scanners, headless Chrome workers automate XSS triggers, per‑student isolated databases prevent cross‑contamination, and flags are student‑specific hashes. Most systems work and scale on two AWS boxes, but maintenance and brittle tests cost time and teaching capacity.

AI-written summary · about

  1. 0:00Start
  2. 7:06set up a fresh environment
  3. 16:21isolated databases
  4. 28:05start accessing files on the server
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.