
Research
Using Trusted Protocols Against You: Gmail as a C2 Mechanism
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.
@gooddata/mock-handling
Advanced tools
The CLI tool in this project aims to automate capture and management of test data.
Given an recording directory, mock tooling with traverse the directory, looking for definitions of data to retrieve
from live backend and store in the recording directory. After this the tool will generate an index.ts
file with
constants that can be used to initialize a recorded backend instance.
The mock tooling is invoked through command line and takes the following arguments:
recordingDir
- directory where input and outputs of recordings liveprojectId
- identifier of project from which to capture datausername
- username to authenticate ashostname
- GoodData backend hostnameconfig
- optionally provide path to tool configuration (by default looks for .gdmockrc in current dir)Config is a JSON file containing an object with pre-defined values of the command line arguments. The keys match names of command line arguments.
If the tool does not receive mandatory argument via either CLI or from config, then it will prompt interactively.
Note: by default, the tool will fail when connecting to non-production deployment where the X.509 certificates are not setup correctly (self-signed, internal authority): node.js will reject the connection due to invalid certificates. You can use the
--accept-untrusted-ssl
option to disable this check (under the covers this sets the node.js documented ENV varNODE_TLS_REJECT_UNAUTHORIZED
to0
)
The recording directory passed to the tooling is expected to follow this layout:
executions
subdir: this is where execution inputs and outputs are stored
The executions
directory can be further organized in any way you see fit. The only hard rule is that
each unique execution is in its own subdirectory and the execution input is stored in definition.json
file.
The definition.json
file contains serialized IExecutionDefinition.
On top of this there is a soft rule that the directory in which the definition.json
is stored should be
named after the fingerprint of the execution definition in the definition.json
. This is useful convention
to have in order to keep only unique recordings.
The scenarios.json
file is optional. If included in execution directory, it is expected to contain
list of vis-scenario pairs. The tool will use this metadata to generate a Scenarios
mapping in the
recording index.ts
file; this mapping can be used to conveniently access particular execution recordings
and create data view facades out of them.
The requests.json
file is optional If included it specifies what data views should be obtained for
the execution definition.
(C) 2017-2022 GoodData Corporation
This project is under MIT License. See LICENSE.
FAQs
GoodData SDK Mock data capture and management tool
The npm package @gooddata/mock-handling receives a total of 2,076 weekly downloads. As such, @gooddata/mock-handling popularity was classified as popular.
We found that @gooddata/mock-handling demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 50 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.
Product
We redesigned Socket's first logged-in page to display rich and insightful visualizations about your repositories protected against supply chain threats.
Product
Automatically fix and test dependency updates with socket fix—a new CLI tool that turns CVE alerts into safe, automated upgrades.