security Archives

Cracking Your Own Code: Auditing Password Policies with Hashcat and John the Ripper

July 17, 2026

Don't wait for a brute-force attack to find your weaknesses. Learn how to use Hashcat and John the Ripper on Linux to audit your password policies with real-world benchmarks.

Security

Mastering mitmproxy: A Hands-on Guide to HTTPS Inspection and API Debugging

July 17, 2026

Take control of your network traffic. This guide shows you how to install mitmproxy, configure SSL inspection for iOS and Android, and use Python scripts to automate API testing.

DevOps

Automating Code Quality: How Pre-commit Hooks Stop Leaks and Messy Commits

July 5, 2026

Stop wasting CI/CD minutes on syntax errors. Learn how to use pre-commit hooks to automate formatting, linting, and secret detection directly on your local machine.

Linux

Stop Using Sudo for Everything: A Guide to systemd User Units and Lingering

July 5, 2026

Ditch sudo for your background tasks. Learn how to set up systemd user units and enable lingering to keep services running securely and persistently without root access.

DevOps

Kubernetes Compliance at Scale: Mastering OPA Gatekeeper

June 8, 2026

Secure your Kubernetes clusters with OPA Gatekeeper. This guide moves you from manual reviews to automated Policy as Code with practical examples for infrastructure compliance.

Linux

Linux Namespaces: The Invisible Walls Behind Every Container

June 6, 2026

Go beyond the Docker CLI. Learn how Linux Namespaces like PID, NET, and User provide the actual isolation that makes containers work.

Security

Hardening Your CI/CD Pipeline: A Practical Guide to SCA, SAST, and DAST

June 3, 2026

Catch vulnerabilities before they reach production. This guide shows you how to integrate SCA, SAST, and DAST into your CI/CD pipeline for a 'Shift Left' security approach.

Programming

Building a Rate Limiter from Scratch in Go: Token Bucket Algorithm for API Protection

June 2, 2026

Building rate limiting from scratch reveals what's actually happening inside the libraries you'd normally reach for. This tutorial walks through implementing a concurrent-safe Token Bucket rate limiter in Go — from the core algorithm to HTTP middleware — with practical parameter tuning advice for production use.

Linux

Linux SUID, SGID, and Sticky Bit: Master Special Permissions for System Security

June 2, 2026

SUID, SGID, and Sticky Bit are Linux's special permission bits that control privilege elevation and file ownership inheritance. Here's how each one works internally, when to actually use them in production, and how to audit your system before someone else finds the misconfigurations.

Security

How to Build a Lightweight Pen-Testing Lab with Docker (DVWA & Metasploitable)

May 31, 2026

Forget heavy VMs. Build a lightweight, legal penetration testing lab using DVWA and Metasploitable on Docker. A battle-tested guide for rapid security practice.