Posted inSecurity
Auditing Linux Kernel Security: A Guide to linux-exploit-suggester
Discover how to use linux-exploit-suggester to identify critical Linux kernel vulnerabilities and prevent local privilege escalation attacks.
Posted inSecurity
Build a Tor Transparent Proxy: A Bulletproof Gateway for Lab Anonymity
Build a secure Tor Transparent Proxy on Linux. Route all lab traffic through the Tor network to prevent IP leaks and ensure total anonymity during security research.
Posted inSecurity
Hardening Systemd Services: A Practical Guide to Sandboxing
Secure your Linux services using Systemd sandboxing features like ProtectSystem, PrivateTmp, and NoNewPrivileges to isolate applications and prevent lateral movement.
Posted inSecurity
Linux Kernel Lockdown: How to Stop Root-Level Attacks
Secure your Linux system against root-level attacks. This guide explains how to implement Kernel Lockdown, covering Integrity vs. Confidentiality modes and troubleshooting tips.
Posted inSecurity
Building a Snort 3 NIDS on Ubuntu: A Practical Guide to Traffic Analysis
Take control of your network security by deploying Snort 3 on Ubuntu. This guide walks you through compiling from source, Lua-based configuration, and writing rules to stop attackers.
Posted inSecurity
Cracking Your Own Code: Auditing Password Policies with Hashcat and John the Ripper
Don't wait for a brute-force attack to find your weaknesses. Learn how to use Hashcat and John the Ripper on Linux to audit your password policies with real-world benchmarks.
Posted inSecurity
Mastering mitmproxy: A Hands-on Guide to HTTPS Inspection and API Debugging
Take control of your network traffic. This guide shows you how to install mitmproxy, configure SSL inspection for iOS and Android, and use Python scripts to automate API testing.
Posted inSecurity
Hunting Web Shells on Linux: An Incident Response Field Guide
Learn how to hunt, analyze, and remove web shells from Linux servers. This guide covers LMD installation, grep patterns, and log correlation to stop silent backdoors.
Posted inSecurity
Deploying MISP on Docker: Build a Proactive Threat Intel Hub for IoC Management
Tired of manual threat tracking? Learn how to deploy MISP on Docker to build a robust, automated Threat Intelligence Platform for your organization.
Posted inSecurity
Killing XXE and SSTI: A Field Guide to Hardening Web Apps
A technical deep-dive into patching XXE and SSTI vulnerabilities. Learn from a real-world incident response scenario to secure your XML parsers and template engines.