Security Archives

Building a Snort 3 NIDS on Ubuntu: A Practical Guide to Traffic Analysis

July 18, 2026

Take control of your network security by deploying Snort 3 on Ubuntu. This guide walks you through compiling from source, Lua-based configuration, and writing rules to stop attackers.

Security

Cracking Your Own Code: Auditing Password Policies with Hashcat and John the Ripper

July 17, 2026

Don't wait for a brute-force attack to find your weaknesses. Learn how to use Hashcat and John the Ripper on Linux to audit your password policies with real-world benchmarks.

Security

Mastering mitmproxy: A Hands-on Guide to HTTPS Inspection and API Debugging

July 17, 2026

Take control of your network traffic. This guide shows you how to install mitmproxy, configure SSL inspection for iOS and Android, and use Python scripts to automate API testing.

Security

Hunting Web Shells on Linux: An Incident Response Field Guide

July 6, 2026

Learn how to hunt, analyze, and remove web shells from Linux servers. This guide covers LMD installation, grep patterns, and log correlation to stop silent backdoors.

Security

Deploying MISP on Docker: Build a Proactive Threat Intel Hub for IoC Management

July 5, 2026

Tired of manual threat tracking? Learn how to deploy MISP on Docker to build a robust, automated Threat Intelligence Platform for your organization.

Security

Killing XXE and SSTI: A Field Guide to Hardening Web Apps

July 5, 2026

A technical deep-dive into patching XXE and SSTI vulnerabilities. Learn from a real-world incident response scenario to secure your XML parsers and template engines.

Security

Deploying Arkime on Linux: Full Packet Capture for Security Incident Investigation

June 30, 2026

Arkime (formerly Moloch) is the tool that turns a 4-day forensic investigation into a 4-hour one — it stores every packet with searchable metadata so you can reconstruct exactly what happened during a security incident. This guide walks through choosing between full packet capture approaches, the tradeoffs involved, and a complete Arkime deployment on Linux with OpenSearch backend.

Security

Building a Self-Hosted EDR with osquery on Linux: Monitor Processes, Network, and File Changes Using SQL

June 30, 2026

osquery lets you query your Linux system like a database — every process, network socket, and file event becomes a SQL row. After six months running it in production as a self-hosted EDR, here is a complete setup guide covering installation, scheduled monitoring queries, file integrity detection, and a simple alert pipeline.

Security

Detecting and Removing Cryptominer Malware on Linux Servers

June 30, 2026

A Linux server running at 98% CPU with no traffic spike is a red flag for cryptominer malware. This guide walks through systematic detection of CPU-hijacking miners, safe removal of all persistence mechanisms, and practical hardening steps to prevent reinfection.

Security

Securing IoT Devices at Home and in Your HomeLab: VLAN Segmentation, Firmware Monitoring, and Blocking Suspicious Connections

June 5, 2026

IoT devices like smart cameras and TVs share your network by default, making them easy pivot points for attackers. This guide covers VLAN segmentation on pfSense, automated firmware monitoring with Python, and using Pi-hole plus packet capture to detect and block suspicious outbound connections before they become a real incident.