Posted inSecurity
Subresource Integrity (SRI): The ‘Armor’ Against Malware When Using CDNs
Learn how to implement Subresource Integrity (SRI) to protect your website from supply chain attacks when using third-party libraries from CDNs.
Posted inSecurity
Installing Endlessh: How to Trap Attack Bots in an Infinite SSH Loop on Linux
Learn how to install Endlessh to create an SSH Tarpit, a technique to trap attack bots in an infinite loop, protecting Linux servers and wasting attacker resources.
Posted inPython
PCAP Analysis with Scapy: From Packet Inspection to Automated Port Scan Hunting
Learn how to use Scapy for professional PCAP analysis. A guide to extracting IP/TCP/HTTP layers and writing scripts to effectively detect port scanning.
Posted inVirtualization
Whonix on VirtualBox: The Ultimate ‘Stealth’ and Anti-IP Leak Solution
A detailed guide on installing Whonix on VirtualBox. Learn about the Gateway-Workstation model to protect your IP address and prevent network data leaks effectively.
Posted inSecurity
Mastering Nessus Essentials: Hunting Internal Network Vulnerabilities Like a Security Pro
Learn how to use Nessus Essentials to scan and detect internal network vulnerabilities. Detailed guide from Docker installation to practical CVE report analysis.
Posted inSecurity
How to Use Canarytokens for Early Intrusion Detection: Setting Traps in Files, URLs, and Emails
Canarytokens is a technique for planting information traps inside files, URLs, and emails to detect hackers the moment they access sensitive data — receiving instant alerts with IP address and timestamp. A step-by-step practical guide: creating tokens and embedding them in fake credential files, .env files, Word documents, and DNS config on Linux servers.
Posted inSecurity
Building an Incident Response Process for Linux Servers: Investigation, Containment, and Recovery After an Attack
A practical guide to building a Linux Server Incident Response process using the PICERL model: from confirming an incident and emergency network isolation, to collecting evidence, eradication, and safely restoring the system. Includes real commands drawn from hands-on production incident experience.
Posted inSecurity
Linux Malware Analysis: Pro Tips for Using strace, ltrace, and Sandboxing
Don't rush to run suspicious files on Linux! Learn how to use strace, ltrace, and sandboxing techniques to analyze malware safely and effectively based on real-world experience.
Posted inUbuntu
Ubuntu Security: Using Firejail to Sandbox Applications and Prevent Data Theft
Don't let a random GitHub script steal your SSH keys or passwords. Firejail allows you to easily sandbox Ubuntu applications, keeping your system secure and lightweight.
Posted inSecurity
Gitleaks Installation Guide: The “Shield” to Prevent Secret and API Key Leaks in Git
Don't let API key leaks ruin your career. A detailed guide on installing Gitleaks to automatically detect and prevent secret exposure in Git repositories.