AWS S3 - Object Storage, Storage Classes, Security, and Replication
A full walkthrough of AWS S3 - buckets, storage classes, versioning, lifecycle policies, encryption, replication, pre-signed URLs, and event notifications
Mhd3omar Blog
Mother's Secret - Code Review, Route State Machine Exploitation, and Path Traversal in Node.js
Comprehensive walkthrough of TryHackMe Mother's Secret covering static code analysis of Express.js routes, emergency command override bypasses, Science Officer role escalation, and path traversal to extract Order 937.
AWS ECS and EKS - Containers, Fargate, and Managed Kubernetes
A full walkthrough of AWS container services - ECS with EC2 and Fargate launch types, task definitions, services, and EKS managed Kubernetes with node groups and IRSA
DAST - Dynamic Application Security Testing, OWASP ZAP, Authenticated Scans, and CI/CD Automation
Comprehensive technical walkthrough of TryHackMe DAST covering black-box dynamic testing, traditional vs AJAX headless spidering, ZEST-authenticated workflows, OpenAPI Swagger audits, and zap2docker pipeline integration.
SAST - Static Application Security Testing, AST Modeling, Taint Analysis, and Semgrep Rules
Comprehensive technical walkthrough of TryHackMe SAST covering white-box manual review vs automated analysis, Abstract Syntax Tree modeling, dataflow taint tracking with Psalm, and IDE integration with Semgrep.
Homelab Part 9: Cloudflare Tunnel for Secure External Access
Using Cloudflare Tunnel to securely expose Jellyfin and Nextcloud outside the home network - no port forwarding, no home IP exposure, just a clean public URL.
AWS Lambda - Serverless Functions, Triggers, and Execution Model
A full walkthrough of AWS Lambda - runtimes, triggers, execution environment, concurrency, VPC integration, layers, and real-world serverless patterns
Homelab Part 8: Nextcloud Personal Cloud Storage
Deploying Nextcloud on Kubernetes with a MariaDB database and Longhorn storage - giving myself a self-hosted Google Drive accessible from any device on the network.
Homelab Part 7: Jellyfin Self-Hosted Media Server
Deploying Jellyfin on Kubernetes - mounting my local movie library, setting up the media server, configuring HTTPS access at jellyfin.home.lab, and streaming to every device on my network.
Dependency Management - Supply Chain Attacks, S3 Skimmers, and Python Dependency Confusion
Comprehensive walkthrough of TryHackMe Dependency Management covering the dependency iceberg, MageCart S3 bucket tampering, credential skimmers, Alex Birsan dependency confusion mechanics, and malicious setuptools RCE.