Security Archives - Page 2 of 10

Static Malware Analysis with Ghidra: A Hands-on Guide for Linux

May 24, 2026

Learn how to use Ghidra on Linux for static malware analysis. This guide provides a practical workflow for reverse engineering ELF and PE binaries to uncover hidden threats.

Security

Stop SSRF in Its Tracks: A Hardened Guide to API & Web Security

May 24, 2026

Is your server secretly attacking your internal network? Learn how to prevent SSRF vulnerabilities using Python IP validation, AWS IMDSv2, and network-level egress filtering.

Security

Hardening Redis for Production: A Practical Guide to ACLs, TLS, and Isolation

May 23, 2026

Redis is fast, but its default settings are a security risk. Learn how to implement ACLs, TLS, and network isolation to protect your production data.

Security

Linux Digital Forensics: Recovering Evidence with Autopsy and TSK

May 23, 2026

Go beyond simple commands. Learn how to use Autopsy and The Sleuth Kit to perform deep-dive digital forensics on Linux, recover deleted evidence, and map out attacker timelines.

Security

Mastering Network Visibility: A Hands-on Guide to Zeek on Linux

May 23, 2026

Move beyond simple alerts. Learn how to deploy Zeek (formerly Bro) on Linux to gain deep, metadata-level visibility into your network traffic and hunt for hidden threats.

Security

Hardening the Linux Kernel: A Practical Guide to IMA Configuration

May 22, 2026

Secure your Linux environment by enabling the Integrity Measurement Architecture (IMA). Learn how to detect file tampering in real-time using kernel-level hashing and TPM integration.

Security

Defending Against ARP Spoofing and Man-in-the-Middle Attacks on Linux with arpwatch and arptables

May 21, 2026

ARP spoofing lets an attacker silently intercept all traffic on your local network — and most standard security setups miss it entirely. This guide covers how to detect ARP-based Man-in-the-Middle attacks using arpwatch, block them with static ARP entries and arptables, and build a lightweight monitoring script for any Linux machine.

Security

npm and pip Supply Chain Security: Detecting Dependency Confusion and Typosquatting Attacks

May 20, 2026

Dependency confusion and typosquatting are two of the most underestimated supply chain threats targeting npm and pip ecosystems. This guide covers practical detection techniques, lockfile hardening, registry configuration, and CI/CD integration to protect your builds from malicious package injection.

Security

Defending Active Directory: Real-World Tactics Against PtH, Kerberoasting, and Golden Ticket Attacks

May 19, 2026

Secure your Active Directory against modern credential theft. A hands-on guide to using BloodHound for auditing, GPO hardening for PtH, and Sysmon for Kerberoasting detection.

Security

Manual Web Forensics: Hunting SQLi and Web Shells via CLI Logs

May 17, 2026

Master manual web forensics using Linux CLI tools like grep and awk to detect SQL injection and hidden web shells in your server logs during an incident.