Security Archives - Page 2 of 11

Practical Web Security: Hunting XSS, SQLi, and IDOR with Burp Suite Community

June 5, 2026

Learn how to use Burp Suite Community Edition to secure your web apps. This practical guide covers proxy setup and manual testing for XSS, SQL Injection, and IDOR.

Security

Deploy OpenCTI on Docker: Build Your Own Threat Intelligence Lab

June 5, 2026

Take control of your threat intelligence. This guide shows you how to deploy OpenCTI on Docker, ensuring your security data remains private and scalable.

Security

Hardening Your CI/CD Pipeline: A Practical Guide to SCA, SAST, and DAST

June 3, 2026

Catch vulnerabilities before they reach production. This guide shows you how to integrate SCA, SAST, and DAST into your CI/CD pipeline for a 'Shift Left' security approach.

Security

Deploying Security Onion: A Practical Guide to Network Security Monitoring (NSM)

June 1, 2026

Transform a spare server into a powerful threat-hunting machine. This guide shows you how to deploy Security Onion to gain deep visibility into your network traffic.

Security

How to Build a Lightweight Pen-Testing Lab with Docker (DVWA & Metasploitable)

May 31, 2026

Forget heavy VMs. Build a lightweight, legal penetration testing lab using DVWA and Metasploitable on Docker. A battle-tested guide for rapid security practice.

Security

Threat Modeling with STRIDE: Analyze Security Risks Before Writing a Single Line of Code

May 29, 2026

STRIDE threat modeling helps you identify security risks in web apps and APIs before writing code — catching authentication flaws, privilege escalation, and data leaks at the design stage. This guide walks through practical tools like OWASP Threat Dragon and pytm, with real examples for REST API architectures.

Security

Metasploit Framework on Linux: Hands-On Penetration Testing in a Legal Lab Environment

May 29, 2026

Learn how to install Metasploit Framework on Linux, set up an isolated penetration testing lab with Metasploitable 2, and validate real vulnerabilities through hands-on exploitation. A practical walkthrough from reconnaissance to post-exploitation, written for engineers who need proof, not just scan reports.

Security

Catching Hackers in the Act: Deploying T-Pot Multi-Protocol Honeypots on Linux

May 29, 2026

Stop defending your network in the dark. This guide shows you how to deploy T-Pot, a powerful multi-protocol honeypot, to capture and visualize real-world attacks in real-time.

Security

Kubernetes Security Auditing: Hardening Clusters with kube-bench and kube-hunter

May 29, 2026

Is your Kubernetes cluster actually secure? Move beyond default settings by using kube-bench and kube-hunter to audit for CIS compliance and discover active vulnerabilities.

Security

Deploying GoPhish for Internal Phishing Simulations: Build a Security Awareness Program That Actually Works

May 28, 2026

Learn how to deploy GoPhish on a Linux VPS to run realistic internal phishing simulations, measure employee click rates, and build a targeted security awareness training program backed by real data.