InfoSecMonkey: No fluff. Just the config that works.

Category Archives: InfoSec-General

Essential Cybersecurity Acronyms: The Practitioner’s Decoder Ring

Essential Cybersecurity Acronyms: The Practitioner’s Decoder Ring

Decode cybersecurity acronyms explained in plain language. Master RCE, IOC, EDR, and ZTNA definitions with practical context for SOC and network engineers.

Read More
auditd on Linux: Install, Configure, and Actually Use the Linux Audit Framework

auditd on Linux: Install, Configure, and Actually Use the Linux Audit Framework

Configure auditd on Linux to capture kernel events. Install the daemon, build a layered ruleset for forensics, and query logs with ausearch and aureport.

Read More
Ettercap in 2026: ARP Poisoning, DNS Spoofing, and Content Filtering on the LAN

Ettercap in 2026: ARP Poisoning, DNS Spoofing, and Content Filtering on the LAN

Run an Ettercap ARP poisoning lab with DNS spoofing and etterfilter content rewriting. Configure the MITM attack, validate traffic interception, and apply blue team...

Read More
Trivy on macOS: Install It, Verify It, Run It

Trivy on macOS: Install It, Verify It, Run It

Install Trivy on macOS via Homebrew or binary. Verify safety after the 2026 incident, then scan images, IaC, and repos for CVEs and secrets.

Read More
Blue Team Tool Series: “arpwatch” on Ubuntu 24.04: Layer 2 Change Detection That Still Earns Its Keep

Blue Team Tool Series: “arpwatch” on Ubuntu 24.04: Layer 2 Change Detection That Still Earns Its Keep

Install arpwatch on Ubuntu 24.04 to detect Layer 2 changes. Configure per-interface sensors, tune alerts, and validate MAC change detection in this practical guide.

Read More
Blue Team Tool Series:  Logwatch Deep Dive: Turning /var/log Noise Into a Daily Security Briefing

Blue Team Tool Series: Logwatch Deep Dive: Turning /var/log Noise Into a Daily Security Briefing

Configure Logwatch daily reports to summarize /var/log noise. Install, tune overrides, enable systemd journal support, and write custom FortiGate parsers.

Read More
Ghidra Zero to Hero: A Practitioner’s Guide to the NSA’s Reverse Engineering Framework

Ghidra Zero to Hero: A Practitioner’s Guide to the NSA’s Reverse Engineering Framework

Install Ghidra on Ubuntu 24.04, analyze stripped binaries, and automate tasks with the headless analyzer and PyGhidra. Get the working config now.

Read More
Red Team Tool Series: Nmap Zero to Hero: Install, Scan, and Tune Like a Practitioner

Red Team Tool Series: Nmap Zero to Hero: Install, Scan, and Tune Like a Practitioner

Install Nmap on macOS and Linux using Homebrew or source. Learn the scan phases, port states, and a six-step workflow for accurate network reconnaissance.

Read More
Google Dorking: A Practitioner’s Guide to Advanced Search Reconnaissance

Google Dorking: A Practitioner’s Guide to Advanced Search Reconnaissance

Master Google dorking operators for passive reconnaissance. Learn to find exposed configs and secrets using site, filetype, and intext syntax without scanning targets.

Read More
Understanding MITRE ATT&CK  A Practitioner’s Guide to Actually Using It

Understanding MITRE ATT&CK A Practitioner’s Guide to Actually Using It

Learn using MITRE ATT&CK framework for detection engineering and threat intel. Master the data model, Navigator workflows, and Python queries for real-world security operations.

Read More
Deploying Recon-ng on Ubuntu Server: A Step-by-Step Installation Guide

Deploying Recon-ng on Ubuntu Server: A Step-by-Step Installation Guide

Install Recon-ng on Ubuntu Server 24.04 using a Python virtual environment. Configure API keys, populate marketplace modules, and run your first OSINT scan securely.

Read More
iPhone Codes to Check Forwarding of Calls and SMS Messages

iPhone Codes to Check Forwarding of Calls and SMS Messages

Use iPhone call forwarding codes to audit line settings, check IMEI, and run diagnostics. Learn why these GSM codes do not detect spyware or...

Read More
XDR vs. SOAR: Is Your Tech Stack Redundant or Resilient?

XDR vs. SOAR: Is Your Tech Stack Redundant or Resilient?

Resolve XDR vs SOAR confusion. Learn to eliminate stack redundancy, define clear automation boundaries, and build a resilient security architecture without paying twice.

Read More
Securing Email with DNS: A Practitioner’s Guide to SPF, DKIM, DMARC and the Modern Authentication Stack

Securing Email with DNS: A Practitioner’s Guide to SPF, DKIM, DMARC and the Modern Authentication Stack

Configure SPF DKIM DMARC records to stop domain spoofing. This guide covers DNS publishing, alignment checks, and enforcement steps for secure email delivery.

Read More
Auditing Web Servers with Nikto 2.6.0: A Practitioner’s Field Guide to Configuration Scanning

Auditing Web Servers with Nikto 2.6.0: A Practitioner’s Field Guide to Configuration Scanning

Run a Nikto 2.6.0 web server audit with this config guide. Install, tune scan scope, handle TLS, and export reports for your security workflow.

Read More
Detecting Bettercap on the Wire: Building a Blue-Team Lab to Identify and Alert on Layer-2 MitM Activity

Detecting Bettercap on the Wire: Building a Blue-Team Lab to Identify and Alert on Layer-2 MitM Activity

Build an isolated lab to detect Bettercap ARP poisoning. Configure Arpwatch and Suricata to alert on Layer-2 MitM activity and rogue DNS artifacts.

Read More
Impacket Scripts Explained: A Practitioner’s Field Guide to the Toolkit Every Defender Should Recognize

Impacket Scripts Explained: A Practitioner’s Field Guide to the Toolkit Every Defender Should Recognize

Impacket scripts explained for defenders. Learn how psexec, secretsdump, and other tools operate on the wire to build accurate Active Directory detections.

Read More
A Practical Guide to DNSRecon: DNS Enumeration Done Right

A Practical Guide to DNSRecon: DNS Enumeration Done Right

Master dnsrecon DNS enumeration with this practical guide. Learn to use standard, brute force, and zone transfer modes to map infrastructure safely and effectively.

Read More