Archives
All the articles I've archived.
-
Securing AI Workloads with SPIFFE/SPIRE
Learn how to replace vulnerable .env files in AI agents with a Zero Trust architecture using SPIFFE/SPIRE, gRPC, and strict mTLS for secure container communication.
-
Deploying a Wazuh SIEM on AWS with a WireGuard Tunnel
How to deploy a Wazuh SIEM on AWS and secure it with a WireGuard VPN tunnel to monitor your infrastructure without exposing an additional admin interface to the internet.
-
Post-Quantum: Understanding the Next Line of Defense in Cybersecurity
The quantum revolution is coming. While it promises incredible scientific breakthroughs, it also poses an existential threat to our digital security. Discover the race between quantum power and the future of encryption.
-
Hack The Box - Editor Write-up : From RCE to Root via PATH Hijacking
A complete write-up for the HTB machine Editor. Initial compromise via an RCE on XWiki, pivoting to a system user, and escalating privileges through a PATH hijacking attack.
-
Hack The Box - Previous Write-up : LFI to Root via Terraform
Guide for the 'Previous' machine on Hack The Box. Learn to exploit an LFI (Path Traversal) vulnerability in NextJS for initial access and escalate privileges to root by hijacking a Terraform provider.
-
Understanding PGP/GPG and Asymmetric Encryption
Protect your emails and sensitive data from interception. Discover what PGP and GPG are, how asymmetric encryption works, and why it's an essential tool for your digital security.