<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="https://mortezaa.com/sitemap.xsl"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9 http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd">
<!-- Sitemap is generated on 2026-09-07 17:29:14 GMT -->
	<url>
		<loc>https://mortezaa.com/</loc>
		<lastmod>2026-09-07T14:49:37+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/</loc>
		<lastmod>2026-07-24T07:36:24+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/about-me/</loc>
		<lastmod>2026-07-31T07:56:16+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/privacy-policy/</loc>
		<lastmod>2025-09-02T03:39:02+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/contact/</loc>
		<lastmod>2025-09-13T09:51:05+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/why-transport-layer-fingerprinting-will-replace-ip-reputation/</loc>
		<lastmod>2026-09-07T14:49:37+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/why-dropping-all-icmp-breaks-path-mtu-discovery/</loc>
		<lastmod>2026-09-07T12:48:18+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/how-to-tunnel-datagrams-with-masque-connect-udp-over-http-3/</loc>
		<lastmod>2026-09-06T14:48:55+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/tproxy-vs-redirect-transparent-socket-interception-on-linux/</loc>
		<lastmod>2026-09-06T12:48:09+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/eliminating-multi-core-socket-contention-with-so_reuseport-and-so_incoming_cpu/</loc>
		<lastmod>2026-09-05T14:46:15+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/x25519mlkem768-vs-x25519-evaluating-hybrid-post-quantum-key-encapsulation/</loc>
		<lastmod>2026-09-05T12:47:00+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/streaming-mixture-of-experts-weight-tensors-directly-from-nvme-storage/</loc>
		<lastmod>2026-09-04T14:48:38+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/the-evolution-of-web-application-firewalls-from-regex-rules-to-ast-tokenizers-and-wasm-filters/</loc>
		<lastmod>2026-09-04T12:48:23+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/voltage-glitching-and-side-channel-leakage-in-embedded-cryptographic-silicon/</loc>
		<lastmod>2026-09-03T12:48:43+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/defensive-sysctl-parameters-for-production-ip-stacks/</loc>
		<lastmod>2026-09-02T14:46:58+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/the-evolution-of-telemetry-from-syslog-scrapers-to-ebpf-and-clickhouse/</loc>
		<lastmod>2026-09-02T12:48:13+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/youre-debugging-dns-in-the-wrong-namespace/</loc>
		<lastmod>2026-09-01T14:47:26+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/tcp-keepalive-does-not-keep-your-connection-alive/</loc>
		<lastmod>2026-09-01T12:50:35+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/linux-systemd-sandboxing-ten-security-directives-for-production-daemons/</loc>
		<lastmod>2026-08-31T14:48:36+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/why-read-only-containers-do-not-stop-binary-execution/</loc>
		<lastmod>2026-08-31T12:46:48+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/noise-handshakes-for-nat-traversal-rathole-multiplexing-architecture/</loc>
		<lastmod>2026-08-30T14:49:21+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/how-to-replace-static-authorized-keys-with-openssh-cryptographic-certificates/</loc>
		<lastmod>2026-08-30T12:48:45+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/your-localhost-server-is-listening-on-every-interface/</loc>
		<lastmod>2026-08-29T15:01:33+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/linux-nftables-flowtables-netfilter-fastpath-connection-state-gaps/</loc>
		<lastmod>2026-08-29T12:46:12+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/debugging-wireguard-mtu-bottlenecks-and-tcp-mss-clamping/</loc>
		<lastmod>2026-08-28T14:46:46+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/android-17-encrypted-client-hello-still-leaves-hostnames-on-the-wire/</loc>
		<lastmod>2026-08-28T12:54:23+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/how-cli-package-managers-bypass-macos-gatekeeper-execution-rules/</loc>
		<lastmod>2026-08-27T14:46:44+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/why-ssh-agent-forwarding-exposes-infrastructure-across-jump-hosts/</loc>
		<lastmod>2026-08-27T12:46:42+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/saml-key-rotation-failures-certificate-fingerprints-and-domain-matching/</loc>
		<lastmod>2026-08-26T14:48:23+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/hadolint-vs-docker-dx-dockerfile-security-linting-compared/</loc>
		<lastmod>2026-08-26T12:49:17+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/browser-extension-stores-are-not-security-boundaries/</loc>
		<lastmod>2026-08-25T14:47:12+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/adversary-in-the-middle-phishing-proxies-how-modern-frameworks-hijack-mfa-sessions/</loc>
		<lastmod>2026-08-25T12:47:10+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/securing-inbound-webhooks-hmac-verification-and-replay-attack-defense/</loc>
		<lastmod>2026-08-24T14:46:20+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/secret-leakage-risks-when-llms-execute-shell-commands/</loc>
		<lastmod>2026-08-24T12:47:04+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/hardening-reverse-proxies-against-waf-bypass-vectors/</loc>
		<lastmod>2026-08-23T14:49:06+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/entra-cvss-10-0-audit-your-tenant-after-cve-2026-69836/</loc>
		<lastmod>2026-08-23T12:58:45+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/why-docker-bypasses-ufw-rules-and-how-to-fix-it/</loc>
		<lastmod>2026-08-22T14:46:15+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/masscan-vs-bgscan-raw-socket-speed-vs-modular-protocol-inspection/</loc>
		<lastmod>2026-08-22T12:46:38+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/offloading-mixture-of-experts-models-to-nvme-storage/</loc>
		<lastmod>2026-08-21T14:46:13+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/why-your-openwrt-transparent-proxy-leaks-packets/</loc>
		<lastmod>2026-08-21T12:47:02+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/zero-trust-tunnels-rathole-setup-for-secure-edge-access/</loc>
		<lastmod>2026-08-21T10:08:41+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/lazydocker-vs-dockge-tui-vs-web-dashboard-for-docker-compose-management/</loc>
		<lastmod>2026-08-21T09:54:13+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/openlogi-local-first-rust-alternative-to-logitech-options/</loc>
		<lastmod>2026-08-20T14:48:42+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/why-your-ai-agent-benchmarks-are-measuring-the-harness/</loc>
		<lastmod>2026-08-19T14:47:28+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/interview-building-cross-agent-memory-engines-in-rust/</loc>
		<lastmod>2026-08-19T12:48:47+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/mapping-ai-agent-skills-to-mitre-attck-frameworks/</loc>
		<lastmod>2026-08-18T16:52:39+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/why-entropy-failures-haunt-self-hosted-cryptography/</loc>
		<lastmod>2026-08-16T16:18:35+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/self-hosted-dns-over-https-a-practical-setup-guide/</loc>
		<lastmod>2026-08-03T10:52:14+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/running-ai-coding-agents-on-a-remote-hetzner-box-via-tailscale/</loc>
		<lastmod>2026-08-03T10:51:30+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/why-ai-agents-will-shrink-their-context-windows/</loc>
		<lastmod>2026-08-03T10:45:21+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/telegram-proxy-management-done-right-in-rust/</loc>
		<lastmod>2026-08-03T10:43:43+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/claude-watch-vpn-aware-monitoring-for-ai-coding-agents-on-macos/</loc>
		<lastmod>2026-08-03T11:05:02+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/the-quiet-rise-of-terminal-user-interfaces/</loc>
		<lastmod>2026-08-03T10:39:47+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/mobile-security-hardening-a-red-team-checklist/</loc>
		<lastmod>2026-08-03T11:05:45+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/why-a-vpn-doesnt-make-you-anonymous/</loc>
		<lastmod>2026-08-03T10:27:08+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/self-hosted-ai-agents-dont-automatically-mean-private/</loc>
		<lastmod>2026-08-03T13:24:33+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/convert-v2ray-configs-between-protocols-with-svm/</loc>
		<lastmod>2026-08-03T10:23:22+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/harden-ssh-with-oryxis-rust-terminal-emulator-and-encrypted-vault/</loc>
		<lastmod>2026-08-03T10:12:25+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/invidious-private-youtube-self-hosted-2/</loc>
		<lastmod>2026-08-03T10:11:09+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/bpb-worker-panel-vs-heimdall-open-source-proxy-gui-comparison/</loc>
		<lastmod>2026-08-03T08:04:23+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/hardening-nginx-reverse-proxy-a-production-case-study/</loc>
		<lastmod>2026-08-03T11:13:30+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/dns-over-https-encrypting-the-last-mile-of-resolution/</loc>
		<lastmod>2026-08-03T11:13:19+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/the-essential-self-hosted-infrastructure-security-checklist/</loc>
		<lastmod>2026-07-31T08:16:56+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/building-a-self-hosted-ai-development-environment-on-linux/</loc>
		<lastmod>2026-07-31T08:15:34+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/building-a-containerized-reconnaissance-lab/</loc>
		<lastmod>2026-07-31T04:59:40+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/the-evolution-of-osint-navigating-cloud-sprawl-and-ai-reconnaissance/</loc>
		<lastmod>2026-08-03T11:12:59+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/the-evolution-of-the-terminal-interface-from-shell-to-ai-supervisor/</loc>
		<lastmod>2026-07-27T08:03:20+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/the-return-of-terminal-interfaces-escaping-gui-sprawl/</loc>
		<lastmod>2026-07-27T08:02:56+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/the-self-hosted-docker-security-checklist/</loc>
		<lastmod>2026-07-26T08:02:04+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/a-zero-trust-checklist-for-hardening-cloud-native-workloads/</loc>
		<lastmod>2026-08-03T13:25:24+00:00</lastmod>
	</url>
	<url>
		<loc>https://mortezaa.com/blog/cybersecurity/the-resurgence-of-terminal-interfaces-in-cloud-security/</loc>
		<lastmod>2026-07-25T20:01:40+00:00</lastmod>
	</url>
</urlset>
<!-- Sitemap is served from cache -->
