security

Where Is OpenSSL Config, Certificates, and Libraries? (Linux & Windows)

Find where OpenSSL keeps openssl.cnf, trust-store certificates, libssl libraries, and the openssl binary on Linux and Windows. Use openssl version -d, which openssl, ldconfig, and OPENSSL_CONF when paths differ between …

Deepak Prasad10 min read
linux

RHEL Patch Management: Security Updates, CVEs and DNF Patching

Learn RHEL patch management with DNF: identify security advisories and CVEs, apply security-only updates, patch specific RHSA or CVEs, and verify remediation.

Omer Cakmak13 min read
security

Install Lex and Yacc on Kali Linux

Install GNU flex and bison on Kali Linux as modern Lex and Yacc replacements, verify versions, compile a sample flex scanner, and remove the packages when the lab is done.

Kennedy Muthii7 min read
security

Install Pyrit on Kali Linux

Build and install Pyrit 0.5.1 on Kali Linux from the JPaulMora GitHub tree with Python 2.7, fix GCC 14 compile flags, verify with pyrit list_cores and benchmark for authorized WPA lab work.

Kennedy Muthii8 min read
security

Install Gophish Phishing Framework on Kali Linux

Install Gophish v0.12.1 on Kali Linux from the official GitHub release, configure config.json, start the admin UI on port 3333, and log in with the first-run password in an authorized phishing lab.

Kennedy Muthii9 min read
security

Install airmon-ng on Kali Linux

Install the Aircrack-ng suite and airmon-ng on Kali Linux with apt or a source build, verify SIMD support, list wireless interfaces, and enable monitor mode for authorized Wi-Fi labs.

Kennedy Muthii8 min read
security

DDoS Attack Example with Torshammer on Kali Linux

Run Torshammer slow POST DoS tests on Kali Linux against local Apache or DVWA, compare DoS versus DDoS, and read curl timing before and during an authorized lab attack.

Kennedy Muthii8 min read
security

Image Steganography on Kali Linux: Hide Messages with Steghide

Hide and recover secret text inside JPEG and PNG images on Kali Linux with steghide and Stegosuite, compare OpenStego, and read capacity and encryption output in an authorized lab.

Kennedy Muthii10 min read
security

Volatility Memory Dump Analysis Tutorial on Kali Linux

Analyze the public Cridex banking trojan memory sample with Volatility 3 and Volatility 2 on Kali Linux—OS profile, process tree, network connections, and reader_sl.exe extraction.

Kennedy Muthii9 min read
security

Infoooze OSINT Tool: Install and Examples on Kali Linux

Install Infoooze 1.3.1 on Kali Linux and run OSINT modules for port scanning, user-agent parsing, EXIF extraction, username recon, and HTTP headers in an authorized lab.

Kennedy Muthii10 min read
security

OWASP Nettacker: Automated Pentesting Framework Tutorial

Install and run OWASP Nettacker 0.4.0 on Kali Linux with Docker, scan Metasploitable 2 using the port_scan module, and start the optional web UI with --start-api in an authorized lab.

Kennedy Muthii11 min read
security

Install Node.js and npm on Kali Linux

Install Node.js and npm on Kali Linux from the rolling apt repository or per-user nvm, run a test script, switch versions with .nvmrc, and fix path and permission errors without NodeSource scripts.

Kennedy Muthii11 min read
security

Install .deb Files on Kali Linux

Install .deb files on Kali Linux with apt install ./package.deb, inspect packages with dpkg-deb, fix broken dependencies, verify architecture, and remove or purge local installs safely.

Kennedy Muthii12 min read
security

Kali Linux Repositories Explained

Configure Kali Linux repositories in deb822 kali.sources, compare rolling and snapshot branches, add third-party repos safely with Signed-By, and fix common apt update errors on Kali Rolling 2026.2.

Kennedy Muthii11 min read
security

Install Tor Browser on Kali Linux

Install Tor Browser on Kali Linux from the official signed archive when torbrowser-launcher is missing, verify with GPG, launch without root, and troubleshoot connection and clock issues.

Kennedy Muthii8 min read
security

PostgreSQL Brute Force Attack Tools and Examples on Kali Linux

Learn PostgreSQL brute force testing on Kali Linux with Hydra, Ncrack, Patator, Metasploit postgres_login, and Nmap pgsql-brute against Metasploitable PostgreSQL 8.3 on port 5432 in an authorized lab.

Kennedy Muthii11 min read
security

Learn Hacking with Metasploitable 2: Metasploit Walkthrough on Kali Linux

Practice Metasploitable 2 exploitation on Kali Linux: Nmap service discovery, Metasploit module mapping, and root shells via vsFTPd, VNC, and Samba in your own lab.

Kennedy Muthii17 min read
linux

Post-Quantum Cryptography in Linux: ML-KEM, ML-DSA, TLS, and SSH

Learn how to check ML-KEM support in TLS, create ML-DSA signatures, and verify post-quantum SSH key exchange on Linux, with tested Rocky Linux examples.

Deepak Prasad22 min read
security

Configure OpenLDAP sudo Rules with SSSD on RHEL Family

Configure OpenLDAP sudoRole policies with SSSD on RHEL, Rocky Linux, AlmaLinux, Oracle Linux, and CentOS Stream clients.

Deepak Prasad19 min read
security

Fix OpenLDAP Invalid Credentials Error 49

Fix OpenLDAP Error 49 for wrong bind DNs, passwords, userPassword ACLs, locked accounts, expired passwords, SSSD cache, PAM, and SSH authentication.

Deepak Prasad18 min read
security

Fix OpenLDAP Insufficient Access Error 50

Fix OpenLDAP Error 50 for ldapadd, ldapmodify, ldapdelete, password changes, cn=config, and no-write-access-to-parent ACL failures.

Deepak Prasad26 min read
security

Configure OpenLDAP Password Policy with ppolicy

Configure OpenLDAP ppolicy for password expiration, warnings, history, account lockout, grace logins, forced resets, and SSSD client behavior.

Deepak Prasad26 min read
security

OpenLDAP ACL Configuration with Practical Examples

Configure OpenLDAP olcAccess ACLs for passwords, users, groups, SSSD, entry and children permissions, with safe testing and rollback.

Deepak Prasad29 min read
system-administration

Configure OpenLDAP Client with SSSD on RHEL-Based Linux

Configure OpenLDAP client authentication with SSSD, authselect, StartTLS, and automatic home directories on RHEL, Rocky Linux, AlmaLinux, Oracle Linux, and CentOS Stream.

Deepak Prasad16 min read
security

Configure OpenLDAP TLS on RHEL-Based Linux

Configure OpenLDAP TLS on RHEL, Rocky Linux, AlmaLinux, Oracle Linux, and CentOS Stream using a private CA, StartTLS, LDAPS, and cn=config.

Deepak Prasad21 min read
linux

Fix curl SSL Certificate Problem Behind Corporate Proxy on Linux

Fix curl error 60 and similar HTTPS failures on Linux when corporate SSL inspection replaces public certificates with a private root CA trusted on Windows but missing from the Linux trust store.

Deepak Prasad15 min read
security

How to View a Certificate with OpenSSL (PEM, CER, Chain, Bundle)

Use OpenSSL to view PEM, CRT, CER, chain, bundle, PFX, and P7B certificates. Check expiry, SAN, fingerprint, remote TLS certs, and verify chains.

Deepak Prasad13 min read
security

Automate keytool Certificate Import in Bash Safely

Back up a PKCS12 truststore, check the keytool alias and SHA-256 fingerprint, import a CA only when missing, and exit cleanly for Ansible, systemd, and CI pipelines.

Deepak Prasad9 min read
security

Sign and Verify a JAR File with keytool and jarsigner

Create a code-signing keypair with keytool, sign a sample JAR with jarsigner, verify the signature, and read the PKIX chain warnings jarsigner prints for a self-signed certificate.

Deepak Prasad11 min read
security

Create Java mTLS Keystore and Truststore with keytool

Create Java mTLS keystore and truststore files with keytool and OpenSSL, then run a mutual TLS HttpsServer lab that fails without a client cert and succeeds.

Deepak Prasad12 min read