Security Archives - Page 4 of 11

Defending Active Directory: Real-World Tactics Against PtH, Kerberoasting, and Golden Ticket Attacks

May 19, 2026

Secure your Active Directory against modern credential theft. A hands-on guide to using BloodHound for auditing, GPO hardening for PtH, and Sysmon for Kerberoasting detection.

Security

Manual Web Forensics: Hunting SQLi and Web Shells via CLI Logs

May 17, 2026

Master manual web forensics using Linux CLI tools like grep and awk to detect SQL injection and hidden web shells in your server logs during an incident.

Security

Ditch the SSH Key Mess: Centralized Access with Smallstep Certificates

May 17, 2026

Say goodbye to the 'authorized_keys' mess. This guide shows you how to implement SSH Certificates with Smallstep for a centralized, SSO-integrated, and highly secure infrastructure.

Security

Killing the Manual Audit: Automated Android Security with MobSF and Docker

May 16, 2026

Ditch manual decompilation. Learn to deploy MobSF on Docker for rapid Android security audits, catching hardcoded secrets and OWASP vulnerabilities in minutes.

Security

6 Months of Linux Threat Hunting with Chainsaw and Sigma: A Field Report

May 15, 2026

Ditch reactive logging. I spent six months using Chainsaw and Sigma rules to build a proactive Linux threat hunting workflow that scans 10GB of logs in seconds.

Security

Automating Infrastructure Security: A Hands-On Guide to Nuclei

May 14, 2026

Ditch the manual security audits. Learn how to use Nuclei to automate vulnerability scanning on your Linux servers with community-verified templates.

Security

Ditch Static Secrets: A Practical Guide to GitHub Actions OIDC

May 13, 2026

Ditch the risk of long-lived AWS and GCP access keys. This guide shows you how to implement OIDC in GitHub Actions to secure your CI/CD with short-lived, self-destructing tokens.

Security

Identity-Based SSH: Why I Finally Closed Port 22 and Ditched Key Management

May 12, 2026

Is SSH key management slowing you down? Switch to identity-based authentication with Tailscale. Close Port 22, use your SSO for access, and simplify your server security in under 20 minutes.

Security

Stop Using Passwords: A Practical Guide to Implementing Passkeys (WebAuthn)

May 12, 2026

Ditch vulnerable passwords for good. This guide walks you through the technical steps and UX best practices for implementing phishing-resistant Passkeys in your web application.

Security

Hunting BOLA: How to Audit Your API Security with OWASP ZAP

May 12, 2026

BOLA is the top risk for modern APIs. Discover how to use OWASP ZAP to automate your security testing, find authorization bugs, and harden your code.