Latest Articles - Page 32

Install Infoooze 1.3.1 on Kali Linux and run OSINT modules for port scanning, user-agent parsing, EXIF extraction, username recon, and HTTP headers in an authorized lab.

Install and run OWASP Nettacker 0.4.0 on Kali Linux with Docker, scan Metasploitable 2 using the port_scan module, and start the optional web UI with --start-api in an authorized lab.

Install Node.js and npm on Kali Linux from the rolling apt repository or per-user nvm, run a test script, switch versions with .nvmrc, and fix path and permission errors without NodeSource scripts.

Install .deb files on Kali Linux with apt install ./package.deb, inspect packages with dpkg-deb, fix broken dependencies, verify architecture, and remove or purge local installs safely.

Configure Kali Linux repositories in deb822 kali.sources, compare rolling and snapshot branches, add third-party repos safely with Signed-By, and fix common apt update errors on Kali Rolling 2026.2.

Install Tor Browser on Kali Linux from the official signed archive when torbrowser-launcher is missing, verify with GPG, launch without root, and troubleshoot connection and clock issues.

Learn PostgreSQL brute force testing on Kali Linux with Hydra, Ncrack, Patator, Metasploit postgres_login, and Nmap pgsql-brute against Metasploitable PostgreSQL 8.3 on port 5432 in an authorized lab.

Practice Metasploitable 2 exploitation on Kali Linux: Nmap service discovery, Metasploit module mapping, and root shells via vsFTPd, VNC, and Samba in your own lab.

Install DVWA on Kali Linux with the native dvwa package, Docker Compose, or a manual Apache and MariaDB stack, then verify port 42001 or 4280 and fix common setup errors.

Install OWASP Juice Shop on Kali Linux using the native package, Docker, or Node.js source, then verify access, connect Burp Suite, and fix common errors.

Use kubectl cordon, drain, and uncordon to mark a node unschedulable, evict workloads safely with PodDisruptionBudget awareness, and return the node to service after maintenance.

Build a kubeadm HA control plane with stacked etcd, HAProxy and Keepalived, control-plane joins, and tested API-server and load-balancer failover.

Check Kubernetes API-server, kubectl, kubelet, kubeadm, container runtime, and control-plane versions, then compare supported version skew.

Deploy Falco on Kubernetes with Helm and modern eBPF, verify syscall collection, trigger runtime alerts, and write and tune custom rules.

Investigate a Kubernetes incident with Falco and audit logs, preserve evidence, contain workloads and nodes, rotate credentials, and redeploy safely.

Enable Kubernetes audit logging on a kubeadm API server, apply a focused policy, generate test events, and trace RBAC, Secret, exec, and denied requests.

Build immutable Kubernetes containers with digest-pinned images, read-only roots, non-root execution, dropped capabilities, and explicit writable volumes.

Promote one container image digest through Trivy scanning, SBOM archival, Cosign signing, registry copy, and Kubernetes drift verification.

Configure Istio PeerAuthentication in PERMISSIVE and STRICT modes, verify workload certificates and sidecar TLS behavior, and block plaintext clients that lack mesh identity.

Scan Kubernetes YAML with Kubesec and KubeLinter, compare findings, lint rendered Helm and Kustomize manifests, enforce CI checks, and verify remediation.

Sign and verify container images with Cosign using local keys and keyless identities, attach SPDX attestations, and test failed verification.

Configure Kubernetes ImagePolicyWebhook with an HTTPS ImageReview service, digest rules, TTL caching, and fail-open or fail-closed admission tests.

Generate CycloneDX and SPDX SBOMs with Trivy, rescan stored inventories for vulnerabilities, compare formats, and archive digest-linked release artifacts.

Build secure minimal container images with multi-stage Dockerfiles, distroless bases, non-root users, digest pins, secret mounts, and runtime checks.

Enable Cilium transparent WireGuard encryption on a running cluster, verify peers and handshake state, capture plaintext versus encrypted cross-node Pod traffic, and document what traffic stays outside the tunnel.

Scan container images with Trivy, filter vulnerabilities by severity, enforce CI exit codes, manage ignores, export reports, and verify rebuilt images.

Compare Kubernetes multi-tenancy models and validate namespace isolation with RBAC, NetworkPolicy, Pod Security, quotas, nodes, and clusters.

Audit and harden kubeadm Linux nodes by reducing services, securing SSH and Kubernetes files, mapping firewall paths, patching safely, and validating readiness.

Apply Kubernetes seccompProfile types Unconfined, RuntimeDefault, and Localhost on Pods and containers, install a custom profile on the kubelet seccomp path, and diagnose denied syscalls with logs and exit codes.

Audit the kube-apiserver static Pod manifest on a kubeadm control plane, review TLS, anonymous access, authorization, admission, and ServiceAccount issuer settings, apply one hardening change safely, and validate health …