Posted inSecurity
Killing XXE and SSTI: A Field Guide to Hardening Web Apps
A technical deep-dive into patching XXE and SSTI vulnerabilities. Learn from a real-world incident response scenario to secure your XML parsers and template engines.
Posted inSecurity
Deploying Arkime on Linux: Full Packet Capture for Security Incident Investigation
Arkime (formerly Moloch) is the tool that turns a 4-day forensic investigation into a 4-hour one — it stores every packet with searchable metadata so you can reconstruct exactly what happened during a security incident. This guide walks through choosing between full packet capture approaches, the tradeoffs involved, and a complete Arkime deployment on Linux with OpenSearch backend.
Posted inSecurity
Building a Self-Hosted EDR with osquery on Linux: Monitor Processes, Network, and File Changes Using SQL
osquery lets you query your Linux system like a database — every process, network socket, and file event becomes a SQL row. After six months running it in production as a self-hosted EDR, here is a complete setup guide covering installation, scheduled monitoring queries, file integrity detection, and a simple alert pipeline.
Posted inSecurity
Detecting and Removing Cryptominer Malware on Linux Servers
A Linux server running at 98% CPU with no traffic spike is a red flag for cryptominer malware. This guide walks through systematic detection of CPU-hijacking miners, safe removal of all persistence mechanisms, and practical hardening steps to prevent reinfection.
Posted inSecurity
Securing IoT Devices at Home and in Your HomeLab: VLAN Segmentation, Firmware Monitoring, and Blocking Suspicious Connections
IoT devices like smart cameras and TVs share your network by default, making them easy pivot points for attackers. This guide covers VLAN segmentation on pfSense, automated firmware monitoring with Python, and using Pi-hole plus packet capture to detect and block suspicious outbound connections before they become a real incident.
Posted inSecurity
Practical Web Security: Hunting XSS, SQLi, and IDOR with Burp Suite Community
Learn how to use Burp Suite Community Edition to secure your web apps. This practical guide covers proxy setup and manual testing for XSS, SQL Injection, and IDOR.
Posted inSecurity
Deploy OpenCTI on Docker: Build Your Own Threat Intelligence Lab
Take control of your threat intelligence. This guide shows you how to deploy OpenCTI on Docker, ensuring your security data remains private and scalable.
Posted inSecurity
Hardening Your CI/CD Pipeline: A Practical Guide to SCA, SAST, and DAST
Catch vulnerabilities before they reach production. This guide shows you how to integrate SCA, SAST, and DAST into your CI/CD pipeline for a 'Shift Left' security approach.
Posted inSecurity
Deploying Security Onion: A Practical Guide to Network Security Monitoring (NSM)
Transform a spare server into a powerful threat-hunting machine. This guide shows you how to deploy Security Onion to gain deep visibility into your network traffic.
Posted inSecurity
How to Build a Lightweight Pen-Testing Lab with Docker (DVWA & Metasploitable)
Forget heavy VMs. Build a lightweight, legal penetration testing lab using DVWA and Metasploitable on Docker. A battle-tested guide for rapid security practice.