Security News
cURL Project and Go Security Teams Reject CVSS as Broken
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
@vgs/vgs-satellite
Advanced tools
@vgs/vgs-satellite
VGS Offline integration application.
VGS Satellite is an application for offline integration with Very Good Security. This application gives you an ability to run requests with your service and transform them into suitable VGS route configuration without any need to sign up. VGS Satellite consists of two parts: UI application for building routes configurations based on HAR files and additional python script for mitmproxy, that transforms intercepted requests into JSON-HAR format per requests.
You can choose between different ways to run VGS Satellite:
PROXY_PORT
- port to run mitmproxy onWEB_PORT
- port to run mitmproxy web UI onSATELLITE_PORT
- port to run vgs-satellite web UI onMITM_DIR
- directory that would be mapped inside containers to store mitmproxy intercepted requestsMITM_ARGS
- additional mitmproxy args (e.g. - "--mode reverse:http://localhost:8080/", empty by default)Clone sources
git clone git@github.com:verygoodsecurity/vgs-satellite.git && cd vgs-satellite
Create or use .env
file inside application root. For environment variable nomenclature see here
Run application
docker-compose up
See package on npm
$ npm install -g yarn
$ yarn global add @vgs/vgs-satellite
running command...
$ SATELLITE_PORT=1234 MITM_DIR=/path/to/har/files vgs-satellite
You can override SATELLITE_PORT
and MITM_DIR
, for details see here
Note: This scenario does not run mitmproxy. To run mitmproxy separately see here
See package on quay
$ docker pull quay.io/verygoodsecurity/vgs-satellite
$ export SATELLITE_PORT=1234
$ export MITM_DIR=/tmp/container_path
running command...
$ docker run -e SATELLITE_PORT -e MITM_DIR -v "/tmp/local_path:${MITM_DIR}" -p $SATELLITE_PORT:$SATELLITE_PORT quay.io/verygoodsecurity/vgs-satellite
You can override SATELLITE_PORT
and MITM_DIR
, for details see here
Note: This scenario does not run mitmproxy. To run mitmproxy separately see here
Note: this manual of how to use vgs-satellite assuming you are running from docker-compose
Run application.
We assume that content of .env
wasn't changed
Run example requests:
curl -H "Content-Type: application/json" -x http://localhost:1230 http://httpbin.org/post -d '{"foo": "bar"}'
Wait for your requests to appear or add your HAR file by clicking Upload HAR file(s)
Note: you can find HAR file of your requests in /path/to/vgs-satallite/mitm-requests
Choose your request from the list
Click secure you payload
Check field you would like to secure.
For additional setting please reference the nomenclature
Click Secure this payload
, then View route configuration
Download inbound/outbound route and reference instructions provided to import your first route on VGS Dashboard!
Mitmproxy script is available here
If you rum mitmproxy separately, use the following command:
MITM_DIR=/path/to/har/files mitmweb -s script/mitm-requests-json.py
Note: VGS Satellite UI and mitmproxy additional script uses MITM_DIR
env variable to sync on directory. Mitmproxy saves HAR-JSON files in MITM_DIR
and VGS Satellite loads requests from MITM_DIR
FAQs
VGS Offline integration project
We found that @vgs/vgs-satellite demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
Security News
Bun 1.2 enhances its JavaScript runtime with 90% Node.js compatibility, built-in S3 and Postgres support, HTML Imports, and faster, cloud-first performance.
Security News
Biden's executive order pushes for AI-driven cybersecurity, software supply chain transparency, and stronger protections for federal and open source systems.