Browsing Tag
linux
297 posts
PasteHunter: A Practical Guide to Automated Paste Site Monitoring for Leaked Data
I got interested in PasteHunter after seeing yet another breach postmortem where the first public sign of a…
OWASP Amass: The Definitive Guide to Attack Surface Mapping and Asset Discovery
The first time I ran OWASP Amass against a real target, the sheer volume of subdomains it surfaced…
DNSDumpster: The Complete Guide to DNS Reconnaissance for Security Researchers
I still remember the first time DNSDumpster saved me hours of manual dig queries during a bug bounty…
Detecting Kernel-Level Rootkits Through System Call Table Redirection: A Look Back at a Foundational Methodology
Every rootkit tells the same lie. It sits between an application and the truth, and it decides what…
Malware Detection Based on Suspicious Behavior Identification: How API Call Sequences Give Malware Away
For years, antivirus engines have leaned on one trick: signatures. Take a sample, disassemble it, pull out a…
AI Security Risks Every Developer Should Know
I got genuinely nervous the first time I saw a prompt injection attack work against an AI-powered feature…
Threat Modeling Best Practices
I’ve sat through threat modeling sessions that produced genuinely great insights, and I’ve sat through ones that felt…
DevSecOps Incident Response Guide
The first serious incident I worked was messier than any tabletop exercise had prepared me for — logs…
How to Build a Security Incident Response Plan
I’ve been handed incident response plans before that were technically complete and practically useless — dozens of pages,…
Purple Teaming Explained: How Offense and Defense Finally Start Talking to Each Other
For years I watched red teams and blue teams operate like two departments in the same building who…