Category Archives: Linux

13 November, 2026

snmp-check: SNMP Enumeration From Kali in One Command

Use snmp-check SNMP enumeration in Kali to pull hosts, ports, processes and software from a community string, then lock down SNMP.

12 November, 2026

Clear Your Bash and Zsh History (and Keep API Keys Out of It)

Clear Bash and Zsh history the right way, delete a single leaked line, and run sessions that keep API keys out of history, scrollback...

12 November, 2026

GitLab CVE-2026-97229: Patch, Verify and Hunt the CI Regex RCE

GitLab CVE-2026-97229 is a CVSS 10 RCE now in CISA KEV. Find the build that really fixes it, apply stopgaps, and hunt for exploitation.

11 November, 2026

EJBCA Internal CA: Deploy a Private PKI for Your Local Servers with Docker

Deploy an EJBCA internal CA in Docker with MariaDB, build a two-tier Root and Issuing CA, and issue trusted TLS certificates to local servers.

10 November, 2026

CVE-2026-98432 Mitigation on FortiGate: Blocking the Linux Kernel TCP Use-After-Free (FG-IR-26-188)

CVE-2026-98432 mitigation for FortiGate and Linux: drop IPv4 options in the NPU, apply the FMWP virtual patch, and block the TCP trigger until you...

10 November, 2026

OpenSSH *sshole (CVE-2026-123158): Find, Patch and Lock Down Alpine sshd

OpenSSH *sshole (CVE-2026-123158) lets a long password unlock Alpine accounts. Check exposure, patch sshd, disable passwords and hunt logs.

5 November, 2026

APT CVE-2026-109518: How a Download Retry Lets an Attacker Swap a Verified Package for Root

APT CVE-2026-109518 lets an on-path attacker swap a verified package for root. Check exposure, patch with retries off and move apt to HTTPS.

2 November, 2026

OpenLDAP Server on Ubuntu 24.04: Deploy, Configure and Use It

Deploy an OpenLDAP server on Ubuntu 24.04: install slapd, add users and groups, enforce TLS and ACLs, then connect SSSD and FortiGate.

29 October, 2026

PHP2Shell Explained: How CVE-2026-109618 and CVE-2026-109619 Turn an Out-of-Memory Error into a Shell

PHP2Shell CVE-2026-109618 explained: how an OOM bailout becomes pre-auth RCE, how to verify the patch, and how to hunt for compromise.

27 October, 2026

arp-scan: Find Every Host on Your LAN in Seconds

Learn arp-scan network discovery: install it on Linux or macOS, sweep a subnet, scan tagged VLANs, export CSV, and catch duplicate IPs fast.

16 October, 2026

nftables Firewall: The Modern Linux Packet Filter, and Every GUI Worth Using to Manage It

Deploy an nftables firewall GUI on Linux. Compare firewalld, Webmin, and Cockpit plugins to manage rules safely without CLI errors or lockouts.

16 October, 2026

OPNsense on a Raspberry Pi: A Step-by-Step Guide

Install OPNsense on Raspberry Pi 4 using UEFI firmware. This guide covers building the boot chain, writing the aarch64 image, and configuring interfaces for...

14 October, 2026

What Is That Process Touching? Finding the Files a Running Process Uses on Linux, macOS, and Windows

Find files used by process on Linux, macOS, and Windows. Use lsof, vmmap, and Sysinternals to enumerate open handles, mapped files, and sockets for...

14 October, 2026

Graylog Open 7.1 on Ubuntu 24.04: Install and Configure a Core Cluster

Install Graylog Open 7.1 on Ubuntu 24.04. Configure the core cluster, Data Node, and pipelines to ingest and parse FortiGate syslog traffic.

12 October, 2026

auditd on Linux: Install, Configure, and Actually Use the Linux Audit Framework

Configure auditd on Linux to capture kernel events. Install the daemon, build a layered ruleset for forensics, and query logs with ausearch and aureport.

11 October, 2026

Logcheck on Linux: How to Install It, Configure It, and Run It

Install and configure logcheck on Linux to filter system logs. Set up ignore rules, schedule hourly checks, and receive clean security alerts via email.

10 October, 2026

Ettercap in 2026: ARP Poisoning, DNS Spoofing, and Content Filtering on the LAN

Run an Ettercap ARP poisoning lab with DNS spoofing and etterfilter content rewriting. Configure the MITM attack, validate traffic interception, and apply blue team...

8 October, 2026

Red Team Tool Series: “tcpflow” Read the Conversation, Not the Packets

Use tcpflow to reassemble TCP streams into readable files. Learn to carve HTTP objects, parse DFXML reports, and analyze FortiGate captures with this practical...