InfoSecMonkey: No fluff. Just the config that works.

Category Archives: InfoSec-General

Microsoft 365 Outage: How a Cascading Failure Took Down Outlook in 74 Countries
13 November, 2026

Microsoft 365 Outage: How a Cascading Failure Took Down Outlook in 74 Countries

The Microsoft 365 outage explained: how health checks and retry storms cascaded across Exchange Online, plus a post-outage admin checklist.

Read More
ARTEX AI Pentesting Platform: How It Works and Why Defenders Should Care
12 November, 2026

ARTEX AI Pentesting Platform: How It Works and Why Defenders Should Care

ARTEX AI pentesting explained: how its planner and worker agents run intrusions, who is abusing it, and how defenders can hunt and block it.

Read More
WHOIS Protocol: History, Limitations, and What Replaced It
11 November, 2026

WHOIS Protocol: History, Limitations, and What Replaced It

Learn how the WHOIS protocol grew from a 1982 ARPANET directory, why port 43 falls short today, and what replaced it for domain lookups.

Read More
SonicWall GMS Vulnerability CVE-2026-109593: Unpatched, End of Life, and What to Do Now
5 November, 2026

SonicWall GMS Vulnerability CVE-2026-109593: Unpatched, End of Life, and What to Do Now

SonicWall GMS vulnerability CVE-2026-109593 will never be patched. Find exposed GMS servers, lock them down with a FortiGate, and migrate to NSM.

Read More
PAC Files Explained: How Proxy Auto-Config Really Works
1 November, 2026

PAC Files Explained: How Proxy Auto-Config Really Works

Learn what a PAC file does, the standard FindProxyForURL format, helper functions, WPAD discovery, FortiGate hosting, and testing with pactester.

Read More
Blockchain Explained for Beginners: How It Works, Minus the Hype
27 October, 2026

Blockchain Explained for Beginners: How It Works, Minus the Hype

Blockchain explained in plain English: hashes, blocks, consensus, and keys, plus the myths to ignore and a tiny chain you can build yourself.

Read More
PHP2Shell (CVE-2026-109618, CVE-2026-109619): Mitigating the PHP RCE with Fortinet
24 October, 2026

PHP2Shell (CVE-2026-109618, CVE-2026-109619): Mitigating the PHP RCE with Fortinet

PHP2Shell Fortinet mitigation for CVE-2026-109618 and 109619: patch PHP, then block exploits with FortiGate IPS, FortiWeb signatures and egress rules.

Read More
Hydra for the Blue Team: Install, Configure, and Run It Against Your Own Defenses
23 October, 2026

Hydra for the Blue Team: Install, Configure, and Run It Against Your Own Defenses

Objective: Stand up THC-Hydra 9.6, learn its syntax well enough to drive it deliberately, and then use it the way a defender should: as...

Read More
Anatomy of a Remote Code Execution Attack
22 October, 2026

Anatomy of a Remote Code Execution Attack

From the first probe to post-exploitation, stage by stage, with what defenders see (and miss) at each step. Executive Summary Objective: Break a remote...

Read More
The Anatomy of a Buffer Overflow Attack
21 October, 2026

The Anatomy of a Buffer Overflow Attack

Learn how a buffer overflow corrupts the stack and hijacks execution, and how stack canaries, DEP/NX, ASLR, and memory-safe code stop it cold.

Read More
Anatomy of an XSS Attack: What It Is, How It Works, and How to Stop It
20 October, 2026

Anatomy of an XSS Attack: What It Is, How It Works, and How to Stop It

Stop XSS attacks by mastering the five-stage kill chain. Run a hands-on lab to break and fix reflected and DOM-based XSS with layered defenses.

Read More
Lua Primer for Security Engineers: The Language Behind Nmap, Wireshark and Snort 3
19 October, 2026

Lua Primer for Security Engineers: The Language Behind Nmap, Wireshark and Snort 3

Learn Lua for security engineers. Parse FortiGate logs and write Nmap NSE scripts. Master tables, patterns, and closures in this practical guide.

Read More
How SSDs Work, How They Perform, and Why SSD Secure Erase Overwrites Are Obsolete
19 October, 2026

How SSDs Work, How They Perform, and Why SSD Secure Erase Overwrites Are Obsolete

Learn SSD secure erase internals, FTL mechanics, and crypto erase. Stop using slow overwrites. Sanitize drives correctly with CLI tools in this guide.

Read More
Nmap Scripting Engine (NSE): From One-Liners to Your First Custom Script
18 October, 2026

Nmap Scripting Engine (NSE): From One-Liners to Your First Custom Script

Master the Nmap Scripting Engine. Learn to select scripts, pass arguments, and write your first Nmap NSE custom script for HTTP header auditing.

Read More
Deploying Cisco TRex: A Line-Rate Traffic Generator for Your Firewall Lab
17 October, 2026

Deploying Cisco TRex: A Line-Rate Traffic Generator for Your Firewall Lab

Deploy Cisco TRex traffic generator on Ubuntu to test FortiGate throughput. Run stateless and stateful tests with Python automation for accurate lab results.

Read More
Deepfake Readiness: 16 Best Practices to Stop a Cloned Voice From Moving Money or Access
14 October, 2026

Deepfake Readiness: 16 Best Practices to Stop a Cloned Voice From Moving Money or Access

Stop deepfake voice attacks with 16 best practices. Map exposure, enforce out-of-band verification, and build a culture that blocks cloned voice fraud.

Read More
TLS 1.0 vs 1.1 vs 1.2 vs 1.3: What Actually Changed and What to Disable Today
14 October, 2026

TLS 1.0 vs 1.1 vs 1.2 vs 1.3: What Actually Changed and What to Disable Today

Learn to disable TLS 1.0 and 1.1 safely. Compare TLS 1.2 vs 1.3 changes, understand the attacks, and apply hardening configs for your network...

Read More
Anatomy of a SQL Injection Attack “SQLi”
13 October, 2026

Anatomy of a SQL Injection Attack “SQLi”

Analyze the SQL injection attack anatomy from recon to exfiltration. Learn how to map each stage to FortiGate WAF controls to stop SQLi exploits...

Read More