Lucas Da Silva’s Post

From a "Developer Script" to Standalone Software My first Python File Organizer worked great, but it had one major barrier: you needed Python installed and a terminal open just to run it. So I iterated. V2.0 transforms the same logic into a full-fledged application. Not just code anymore, a tool anyone can actually use. What's new:    1) Clean GUI built with Tkinter      2) Browse and select folders visually, no path typing required    3) Bundled into a standalone .exe with PyInstaller 450 mixed files. 7 clean folders. Done in seconds. A quick note on security:  Since this is an open-source and self-signed, Windows may display a SmartScreen warning. That's standard for apps without a paid code-signing certificate, not a red flag. I've documented how to bypass it safely (or run from source) in the README. The code and the release are live on GitHub - link in the comments. #Python #SoftwareEngineering #Automation #GUI #Tkinter #OpenSource

I got tired of SSHing into servers one by one to run the same command. So I built something about it, and just shipped it as my first open source Python package. It's called sshrunner. You give it a list of servers, a command, and it runs everything in parallel over SSH. That's really it. No complicated setup. No agents. Just: pip install sshrunner It also handles jump hosts, saves per-host logs, and has an interactive mode where you type a command once and it broadcasts to every server at the same time. 👀 The CI setup was a rabbit hole of its own. I wanted real tests, not mocks, so I spun up 3 actual SSH containers with Docker Compose on every push. Turns out netcat will happily tell you a port is open before SSH is actually ready. The fix? Switch to ssh-keyscan and wait for the real banner. ✅ Small thing, took way too long to figure out 😅 Building it taught me a lot, paramiko internals, threading, packaging on PyPI, and more CI debugging than I'd like to admit. Still early, v0.1.2, lots on the roadmap. Would genuinely love feedback from anyone who does a lot of server wrangling. 👉 GitHub: https://lnkd.in/dHjXpCwJ 👉 PyPI: https://lnkd.in/dgG4mHQC #Python #OpenSource #DevOps #SSH #Automation #GitHubActions

Built a web-based network scanning tool using Python and Flask. It performs multi-threaded port scanning and shows results in a browser dashboard with live progress, scan history, and export options. I also added a simple risk analysis layer that gives a short explanation for each open port, along with basic safety controls to restrict unintended scans. Features: - Multi-threaded TCP scanning - Browser UI with real-time results - Scan history stored in SQLite - Export reports (TXT, JSON) - Safe mode for controlled usage GitHub: https://lnkd.in/gKDBtUs3

🚀 Built a Secure Authentication System with MFA & Brute-Force Protection 🔐 Excited to share our recent project where we developed a Secure Authentication Module focused on real-world security and modern UI design. 💡 Key Features: 🔒 Password security using SHA-256 hashing 🔑 Multi-Factor Authentication (MFA) with TOTP 🚫 Brute-force protection (account blocking after multiple failed attempts) 📊 Activity logging system for monitoring login attempts 💾 JSON-based lightweight database 🖥️ Interactive GUI built with Tkinter ⚙️ Tech Stack: Python 🐍 | Tkinter | PyOTP | JSON 🧠 What we learned: • Real-world authentication mechanisms • Preventing brute-force attacks • Importance of layered security (MFA) • Designing secure and scalable systems 🔗 GitHub Repository: 👉 https://lnkd.in/gYAmHs_R 👨💻 Team Members: @ShashwatDubey @PawanSingh 🎓 Guided by: Arjun Saini 🎯 Future Improvements: • Web integration using Flask • Google Authenticator QR support • Database (MySQL) integration • Advanced encryption techniques #project #OperatingSystems #MemoryManagement #DynamicMemoryManagement #VirtualMemory #Paging #Segmentation #FIFO #LRU #PageReplacement #ComputerScience #OSProject #StudentProject #ProjectPresentation #TechInnovation

I have built my own HTTP server as a part of CodeCrafters challenge. Building a web server from scratch is one of those projects for a programmer that differentiates between using the internet and understanding how the internet actually works. Beyond just using APIs, this challenge helped me to understand sockets, binary data, and the HTTP protocol at a low level. You can read my blog around it here : https://lnkd.in/gn-sWv6w Github repo : https://lnkd.in/gXaC-VGZ CodeCrafters.io (YC S22) #Python #Programming

Upgraded my Python Email project — and it's now a full automation system! A few days ago I posted about sending my first email with Python. That was just the beginning. I took it further and built a complete Email Automation System with 3 powerful upgrades: 🔹 Multiple Receivers — sends to unlimited addresses from one list 🔹 File Attachment — attaches any file (PDF, image, Excel) automatically 🔹 Daily Scheduler — emails send at a fixed time every day, zero manual work What I used: ⚙️ Python 3.11 · smtplib · MIMEMultipart · Base64 Encoding 🔐 Gmail SMTP · SSL Port 465 · Google 2FA App Password ⏰ schedule library · Error Handling · os module From a 13-line homework to a fully automated system — this is what iteration looks like. Full code + documentation on GitHub: https://lnkd.in/gA5hU7Nb #Python #Automation #EmailAutomation #SMTP #Programming #100DaysOfCode

"ImportError: cannot import name 'FastMCP'" I stared at this for way too long. The library was installed. The version was correct. The import path was right. pip install mcp → success from mcp.server import FastMCP → ImportError Here's what happened: My project had a folder called mcp/. Python found it first. That's it. Python's import system checks the local directory before installed packages. My mcp/ folder — which held config files — was silently hijacking every import call. The fix was one line: sys.path.remove(os.path.dirname(__file__)) The debugging? Over an hour of reinstalling packages, checking versions, and questioning my sanity. Name your folders carefully. Python's import system doesn't care about your intentions — only your directory structure. If your installed package suddenly "can't be found," check if you accidentally created a folder with the same name. Ever had a naming collision silently break your project? #Python #Debugging #DeveloperLife #SoftwareEngineering

Version 1.0 Of DorkSINT is live!! DorkSINT is an open-source Python CLI that speeds up Google dorking by turning your search objective into structured, paste-ready queries. It supports interactive prompts and non-interactive flags, includes reusable query templates, and runs natively in both PowerShell and CMD. Built for legal, authorized security research ONLY. https://lnkd.in/gYg2yhGA

🚂 𝙆𝙌𝙇 𝙀𝙭𝙥𝙧𝙚𝙨𝙨: "Detect TLS validation bypass via PowerShell" PowerShell disabling TLS validation before downloading the payload, it’s a small step, but a very useful one from a detection point of view. Just reading about a fake Boeing RFQ was enough to trigger a full attack chain — starting from a DOCX and moving through RTF, JavaScript, PowerShell and even a full Python runtime, ending with Cobalt Strike running in memory (⬇️ 🔗). Nothing particularly new in terms of techniques, but the way everything is chained together makes it effective and easy to miss. It relies on tools and formats we see daily. Being focus on catch the IoA Pattern, I created the KQL Detection below. Happy Easter 🐣 Hide the eggs… but monitor is not happening the same with your TLS traffic 😅 KQL – Detect TLS validation bypass via PowerShell: DeviceProcessEvents | where Timestamp > ago(1d) | where FileName in~ ("powershell.exe","pwsh.exe") | where ProcessCommandLine has_any ("ServerCertificateValidationCallback","TrustAllCertsPolicy","SkipCertificateCheck","CertificatePolicy") | project Timestamp, DeviceName,DeviceId, AccountName, FileName, ProcessCommandLine,InitiatingProcessFileName,InitiatingProcessCommandLine, ReportId #KQLExpress #ThreatHunting #BlueTeam #TLS

Your Dockerfile's FROM line is a trust decision. 🔐 A developer using Label Studio just opened a GitHub issue asking the team to swap their python base image for Docker Hardened Images (DHI) after repeatedly hitting vulnerabilities in image scans. It's a pattern I see constantly: → Team builds a great app → Base image carries hidden CVEs → Security scan fails → Everyone scrambles The fix? Start from a hardened base. DHI ships with a minimal attack surface, no unnecessary packages, and regular security updates baked in. And since earlier this year, it's free under Apache 2.0. Small Dockerfile change. Big security posture improvement. 🔗 See the issue: https://lnkd.in/gQ8YNnJx #ContainerSecurity #Docker #DHI #DevSecOps #DockerHardenedImages #Kubernetes