Day 12: Kubernetes RBAC & Pod Security - Hardening Cluster Workloads
A practical walkthrough of Kubernetes RBAC, Pod Security Standards, Network Policies, and service account hardening - securing cluster workloads beyond the container boundary.
Mhd3omar Blog
Antivirus Evasion & Privilege Escalation (Part 1)
WEEK 5 Antivirus Evasion & Privilege Escalation (Part 1)
Chapter 3 File In, File Out
Chapter 3 of Linux Shell Scripting Cookbook - file creation, permissions, comparison, navigation, and filesystem operations
Day 11: Container Scanning with Trivy - Finding CVEs Before Deploy
A full walkthrough of Trivy - scanning container images, filesystems, Git repos, and IaC files for vulnerabilities and misconfigurations, plus integrating it into GitHub Actions.
Day 10: Docker Security Hardening - Breaking the Root Container Myth
A practical walkthrough of Docker security hardening - non-root users, read-only filesystems, dropped Linux capabilities, multi-stage builds, and Docker Bench for Security.
Day 9: HashiCorp Vault - Centralized Secrets and Dynamic Tokens
A full walkthrough of HashiCorp Vault - architecture, secrets engines, auth methods, dynamic secrets, and hands-on usage for multi-cloud and on-prem secrets management.
Day 8: AWS Secrets Manager & Parameter Store - Securing Credentials
A practical walkthrough of AWS Secrets Manager and SSM Parameter Store - how to store, rotate, and retrieve secrets securely without hardcoding credentials anywhere.
Day 6: AWS WAF & Shield - Application Filtering and DDoS Defense
A practical walkthrough of AWS WAF for application-layer (L7) protection and AWS Shield for DDoS mitigation - how to safely deploy rules without breaking production.
Nmap commands note
Nmap progression guide starts with stealthy discovery and moves toward aggressive enumeration
TryHackMe: LookUp Walkthrough
Complete walkthrough of TryHackMe LookUp machine. Covering username enumeration, elFinder command injection, SUID PATH hijacking to pivot to user think, and sudo look binary exploitation for root.