Why UFW? There are at least two (That’s how many I know) ways to configure iptables rules: By iptables command itself By ufw - Uncomplicated Firewall - which is also a commands tool, but it si...
How to Take Better Notes?
Disclaimer This content comes from the Book How to Take Smart Notes and Evergreen If you’re interested in diving deeper into psychological aspects, or you feel unconvinced or just because y...
Blackarch has it's own official docker image!
You can find it HERE That’s amazing news. Having an official and stable container will make it much easier to develop other blackarch containers, and I wish there was one when I was creating my co...
Security of Docker Containers
Intro The use of Docker Containers has changed completely on how we deploy our applications, many though think that all the apps running in the container are completely isolated from the host syst...
Concept of Preventing Insufficient Logging & Monitoring
Intro Security Breaches happen, and also you should be prepared for them to happen, expect them! With this mindset you can minimize the impact of the breach. With logging, we can be better prepare...
Setting up Hashicorp Vault to manage our Github Token
UPDATE: This blog post is about managing secrets to authenticate to GitHub via HTTPS connection. But you can also authenticate via SSH connection and generate your own private key as described h...
Setting up ZAP Scan in CI/CD pipeline
What is CI/CD pipeline? To put it simply, it is a pathway to deployment, in a fast way in respect with Agile manifesto. Every pull request on GitHub should be checked in order to check if it’s work...
Learning on how to build a modern WebApp - MEAN STACK
I’ve recently decided that it is a great idea to learn the ‘basics’ (from my perspective) of modern WebApp development. This post won’t be some kind of guide - just my thoughts :) Why learning Web...
Can OWASP ZAP replace Burp Suite Professional?
The short answer - NO :) Burp Suite offers a tremendous scope of functionalities in one of his app implementation, it has also funds from the paid version to develop this tool more and more, so I ...
OWASP-ZAP-Fuzzer is it a great alternative for Burp-Suite Intruder?
The tools used for fuzzing web-forms / inputs ffuf wfuzz hydra One of the biggest problems with fuzzing… Is that for a beginner - it’s not that easy to predefine input fields to fuzz. This...