Category: infosec

Security considerations for static generated websites

An exploration of security considerations, risks, and best practices when deploying and serving static generated websites.

Topics:

security static-sites web-development hosting deployment information-security

Read article

Detecting disinformation: technical approaches and tools

An exploration of technical methods and tools for identifying and analyzing disinformation in digital content.

Topics:

security analysis machine-learning verification information-security

Read article

Deploying and utilising Nightingale Docker for container security testing

A comprehensive guide to setting up, configuring, and effectively using the Nightingale Docker container for testing Docker infrastructure and container security.

Topics:

docker pentesting container-security security-tools information-security

Read article

From farming karma to farming minds on social media

A deep dive into how easily social media platforms can be manipulated to control narratives, using a viral Reddit post as a case study to explore the mechanics of digital deception.

Topics:

manipulation social-media misinformation karma-farming narrative-control

Read article

The thin veil of phone number verification in modern apps

An in-depth analysis of phone number verification requirements in modern apps, examining the limited security benefits versus the extensive data collection advantages for companies.

Topics:

privacy security information-security data-collection verification authentication

Read article

Setting up bWAPP with Docker: quick local security testing

Learn how to set up bWAPP, a deliberately vulnerable web application, using Docker for quick and easy security testing on your local machine.

Topics:

docker bwapp information-security pentesting security-tools

Read article

Comprehensive information security learning resources

A curated collection of high-quality information security learning resources including websites, podcasts, tutorials, and video content.

Topics:

resources learning tutorials information-security

Read article

Automated CLI proxy intercepts

Learn how to set up mitmproxy using Docker to intercept, inspect, and manipulate HTTP requests from browsers and command-line tools.

Topics:

information-security mitmproxy pentesting

Read article

Structured SSH key management: beyond basic organisation

Learn how to implement a robust organisation system for your SSH keys with practical directory structures, naming conventions, and automation techniques.

Topics:

ssh security linux productivity devops information-security

Read article

Running OWASP Zed Attack Proxy with Docker

Learn how to set up and run OWASP ZAP using Docker for web application security testing, both in GUI mode and headless for CI/CD integration.

Topics:

docker owasp pentesting security devsecops information-security

Read article