ScoutSuite
ScoutSuite is a really nice security tool to audit your cloud solutions. I have used it on the AWS cloud […]
security
Using NetBird for Kubernetes Access
Securing access to your Kubernetes clusters is crucial as inadequate security measures can lead to unauthorized access and potential data
beginners, security, webdev
Best Practices for API Authentication and Authorization
Imagine you’re entering a restricted area at a concert venue. Security guards (authentication) first check your ID (credentials) to verify
Securing Your Site: Obtain an SSL Certificate with Let’s Encrypt When Your ISP Blocks Port 80
Wildcard certificates are highly beneficial because they secure all subdomains of your main domain with a single certificate. This simplifies
HackTheBox – Writeup Keeper [Retired]
Neste writeup iremos explorar uma máquina easy chamada Keeper que explora as seguintes vulnerabilidades e técnicas. Recon e User Flag
Mitigating the iconv Vulnerability for PHP (CVE-2024-2961)
This post originally appeared on my blog, here. Recently, CVE-2024-2961 was released which identifies a buffer overflow vulnerability in GNU
eBPF: Unleashing Kernel Magic for Modern Infrastructure
Welcome to the whimsical world of eBPF, where the Linux kernel dons its cape and transforms into a superhero of
Securing the Cloud #27
Welcome to the 27th edition of the Securing the Cloud Newsletter! In this issue, we dive into the latest trends
Migrating to Chainguard Images: less CVEs for safer container runtimes
Software supply chain attacks have become common in the industry lately, with the latest episode featuring the infamous CVE-202403904 and
The best SWEs need SCA
The best developers work smarter, not harder. They are lazy. They don’t build a tool from scratch when it already