Category

Cybersecurity and Ethical Hacking Tutorials

Learn cybersecurity concepts, ethical hacking techniques, system hardening, and best practices to secure applications and infrastructure.

The Security section covers cybersecurity concepts, ethical hacking techniques, and system hardening practices.

Security is critical for protecting systems, networks, and applications from threats. These tutorials help you understand vulnerabilities, offensive-security lab setups, and defensive controls.

Browse the articles below for penetration-testing walkthroughs, hardening guides, and certification-oriented topics.

You can also explore Linux and Networking for deeper insights.

130 articles

Security category illustration with shield, access control, and threat defense graphics
security

How to manually expire any certificate OpenSSL

Step by Step instructions to manually expire any certificate using openssl. Different commands and methods to generate an expired certificate

Deepak Prasad8 min read
security

openssl ca vs openssl x509 comparison [With Examples]

Detailed comparison between openssl ca vs openssl x509 command with examples. Similarities and difference between ca vs x509 argument of openssl command

Deepak Prasad15 min read
security

How to add X.509 extensions to certificate OpenSSL

Step by Step instructions to add X.509 extensions to certificates, CSR, RootCA using openssl command.

Deepak Prasad11 min read
security

Generate duplicate certificates OpenSSL CA [Same CN]

Step by step instructions to generate duplicate certificates with OpenSSL CA using the same CSR with same Subject (Common Name) in all the certificates

Deepak Prasad9 min read
security

How to revoke missing/lost certificate OpenSSL [Step-by-Step]

Step by step guide to revoke missing or lost certificate using openssl. We can manually update the CA database to mark any certificate revoked and generate CRL

Deepak Prasad6 min read
security

4 step quick guide to install SSL Certificate on Nginx

Install an SSL certificate on Nginx in just 4 steps. Secure your website with HTTPS and gain the trust of your visitors with a valid SSL certificate.

Deepak Prasad8 min read
security

Learn about MAC Spoofing using Practical Example

MAC Spoofing is the process of changing the Media Access Control (MAC) address of a network interface on a device that’s connected to a network. The MAC

Deepak Prasad8 min read
security

How to perform ARP Poisoning or Spoofing

ARP (Address Resolution Protocol) is a key network protocol used in IPv4 networks to link IP addresses to their corresponding MAC addresses. It plays an

Deepak Prasad8 min read
security

How to perform DNS Cache Poisoning (Spoofing)

DNS Cache Poisoning is an attack that's also known as DNS Spoofing. It's a type of cyber attack where hackers exploit vulnerabilities in the Domain Name

Deepak Prasad7 min read
security

How to perform Denial of Service (DoS) Attack

Imagine being at a cafe with a friend, trying to have a conversation when all of a sudden, a group of people come in and start shouting. You can’t even hear

Deepak Prasad7 min read
security

Exploit Vulnerabilities using Metasploit

Metasploit is a mighty and elastic framework that you can use in the development, examination, and implementation of exploits. In 2003 H.D. Moore created it,

Deepak Prasad7 min read
security

6 Tools to Perform Credential Attack [100% Working]

Credential attacks are a type of cybersecurity threat that focuses on one thing: gaining unauthorized access to systems or networks. Attackers do this by

Deepak Prasad15 min read
security

Vulnerability Scanning Tools with Examples

Vulnerability scanning is the process of inspecting an information system for known security weaknesses. This process provides results with no

Deepak Prasad14 min read
security

Network Reconnaissance using Nmap [Cheat Cheet]

Network reconnaissance is a critical part of any network pentesting operation. Knowing more information about the target’s network will let us know about the

Deepak Prasad12 min read
security

Top Open-source intelligence (OSINT) Tools

OSINT aka Open source Intelligence is the data and information that is retrieved from all kinds of sources like Social media , Search engines , Domains , DNS Names , emails , journals , newspapers and what not.

Deepak Prasad13 min read
security

How to Hack Social Media Accounts - ZPhisher [5 Simple Steps]

Step by step instructions to hack social media accounts using automated phishing tool i.e. zphisher with practical example.

Kennedy Muthii5 min read
security

How to Install GoBuster with Basic Usage on Ubuntu

This tutorial will guide you through steps to install Gobuster on Ubuntu, configuring it, and basic to advanced usage tips, including working with wordlists and uninstalling if needed.

Deepak Prasad8 min read
security

WPScan: WordPress Vulnerability Scanner Guide

WPScan is a WordPress vulnerability scanner, a penetration testing tool used to scan for vulnerabilities on WordPress-powered websites.

Deepak Prasad6 min read
security

Create forensic image with FTK Imager [Step-by-Step]

Step by step instructions to obtain forensic image and volatile memory image from PC using FTK Imager with screenshots

Kennedy Muthii6 min read
security

Social Engineering Attacks [8 Common Attacks]

Different types of social engineering attacks and how they are performed explained in detail

Kennedy Muthii7 min read
security

Install Tor Browser on Rocky Linux

Step by step instructions to install and configure tor browser in Rocky Linux. 2 different ways to install tor browser in Linux with screenshots

Deepak Prasad6 min read
security

6 easy steps to setup offline two factor authentication in Linux

Configure Google Authenticator with Offline two factor authentication to secure ssh, sudo and su using PAM module pam_google_authenticator.so in RHEL/CentOS 7/8

Deepak Prasad10 min read
security

Automate phishing campaigns using FiercePhish [Step-by-Step]

With the help of a robust open-source tool FiercePhish, you can manage a wide range of phishing operations as well as carry out several phishing engagements

Kennedy Muthii5 min read
security

Install & Configure OpenVPN Server Easy-RSA 3 (RHEL/CentOS 7) in Linux

Install and configure openvpn server and openvpn client with easy-rsa 3 in centos or rhel 7 linux. Create CA, CSR certificates for openvpn server client model.

Deepak Prasad14 min read
security

Setup Hacking Lab with Metasploitable [7 Easy Steps]

We will setup hacking lab which will consist of an attack orchestrating Operating System which in our case we will use the Kali Linux operating system and a vulnerable operating system which in our case is the …

Kennedy Muthii5 min read
security

How to Inject Encoded Payload

One major problem that most Ethical hackers and penetration testers face is bypassing Anti-Virus software when executing payloads. If you are running an

Deepak Prasad8 min read
security

Tutorial: Encrypt, Decrypt, Sign a file with GPG Public Key in Linux

How to and Tutorial on encrypting decrypting signing message file with GPG key pair passphrase of private public key in Linux with example on command line

Deepak Prasad12 min read
security

Simple steps to install & configure ClamAV in CentOS 7

Step by step guide to install and configure ClamAV on CentOS / RHEl 7 Linux. ClamAV is an open source antivirus tool to protect against trojan, viruses etc

Deepak Prasad9 min read
security

Automate SSH Brute Force Attack

SSH brute force attacks are a type of cyber attack that is becoming increasingly common. They involve the use of automated software to try and gain access to

Kennedy Muthii5 min read
security

Beginners guide to use ssh config file with examples

beginners guide to learn and use ssh config file with example to define different SSH client arguments, There are different configuration files which can be used to define..

Deepak Prasad7 min read