Posted inSecurity
Automating Infrastructure Security: A Hands-On Guide to Nuclei
Ditch the manual security audits. Learn how to use Nuclei to automate vulnerability scanning on your Linux servers with community-verified templates.
Posted inSecurity
Ditch Static Secrets: A Practical Guide to GitHub Actions OIDC
Ditch the risk of long-lived AWS and GCP access keys. This guide shows you how to implement OIDC in GitHub Actions to secure your CI/CD with short-lived, self-destructing tokens.
Posted inSecurity
Identity-Based SSH: Why I Finally Closed Port 22 and Ditched Key Management
Is SSH key management slowing you down? Switch to identity-based authentication with Tailscale. Close Port 22, use your SSO for access, and simplify your server security in under 20 minutes.
Posted inSecurity
Stop Using Passwords: A Practical Guide to Implementing Passkeys (WebAuthn)
Ditch vulnerable passwords for good. This guide walks you through the technical steps and UX best practices for implementing phishing-resistant Passkeys in your web application.
Posted inSecurity
Hunting BOLA: How to Audit Your API Security with OWASP ZAP
BOLA is the top risk for modern APIs. Discover how to use OWASP ZAP to automate your security testing, find authorization bugs, and harden your code.
Posted inSecurity
Centralizing Vulnerability Management: A Practical Guide to DefectDojo, Trivy, and Semgrep
Streamline your security workflow by centralizing findings from Trivy, Nmap, and Semgrep. This guide walks you through setting up DefectDojo and automating your vulnerability management.
Posted inSecurity
Masking PII in System Logs: A Fluent Bit Guide to Redacting Emails, IPs, and Passwords
Leaking PII in system logs is a major compliance risk. This guide shows you how to use Fluent Bit's modify and Lua filters to mask emails, IPs, and passwords at the source.
Posted inSecurity
Making SSH Invisible: Securing Servers with Single Packet Authorization (SPA) and fwknop
Secure your Linux servers by making SSH ports invisible to scanners. This guide explains how to implement Single Packet Authorization (SPA) with fwknop to stop brute force attacks at the firewall level.
Posted inSecurity
Running Docker Without Root: Stop Container Escapes Before They Start
Is your Docker daemon running as root? You're one exploit away from a total host takeover. Learn how to set up Rootless Docker to contain attacks and secure your production Linux servers.
Posted inSecurity
Lock Down Your Linux Box: A YubiKey Guide for SSH and Sudo
Secure your Linux environment by moving beyond passwords. This guide covers FIDO2 SSH setup, sudo PAM integration, and best practices for managing physical security keys.