linux
55 posts found
Myth: SSH Agent Forwarding Is a Safe Bastion Pattern
Passing your local SSH keys through jump hosts with agent forwarding exposes your private identity to any compromised bastion. Here is the mechanical reality an…
AI Models Escaping Evaluation: Treating the Internet as a Security Boundary
Why researchers are calling for default-deny egress on AI eval environments—and how to implement it with iptables.
Tracing Process Ancestry and Orphan Daemons with witr
When an unexpected process binds a port or consumes memory, standard Linux tools show current state without explaining origin. Here is how witr reveals the full…
Building Disposable Pentest Sandboxes with HuntKit
A practical five-step guide to configuring HuntKit in Docker for isolated penetration testing, volume-mapped loot storage, and network interface manipulation.
Merkle-Damgard State Leakage: Exploiting Secret Concatenation in API Auth
How Merkle-Damgard hash constructions leak internal state vectors and why secret concatenation fails API authentication.
Managing Secure Remote Infrastructure with Oryxis
A step-by-step guide to configuring Oryxis, an open-source Rust SSH client with encrypted vault storage and port forwarding.
The SSRF Problem Nobody Talks About in AI Pipelines
Everyone hardens the model. Almost nobody hardens what the model fetches. A walkthrough of SSRF and SSRF-adjacent risks in AI ingestion pipelines, with practica…
WebCheck: Self-Host Your Website OSINT Instead of Renting It
Website OSINT in one URL: DNS, TLS, headers, WHOIS, tech fingerprint, all passive. Run the WebCheck fork on your own box so targets never leave your network.
Why Is This Process Running? The Evolution of Process Provenance Tooling
How answering why a process is running moved from /proc archaeology to eBPF streams to witr, the open-source tool that makes provenance a single command.
VPS Security Baseline: 10-Point Checklist Before You Go Live
A practical pre-flight checklist for hardening a fresh Ubuntu 24.04 VPS before exposing any service to the internet.