Infostealer: what it is and how to tell if you're infected
An infostealer steals saved passwords, session cookies and crypto wallets from your browser. See how it spreads, the …
Hardening 76 posts
Information security in plain English: scams, hardening and privacy — plus retrogaming, games and geek culture.
KRACK: the 2017 attack that broke your Wi-Fi's WPA2
On Oct 16, 2017, the KRACK research showed WPA2 could be bypassed without knowing the Wi-Fi password. How the attack …
What Is SQL Injection? How It Works and How to Prevent It
SQL injection still takes down whole companies. See how the attack works with a simple example, real cases like …
Get-NetFirewallRule: Audit Windows Firewall Rules
How to use Get-NetFirewallRule in PowerShell to list open inbound rules, spot suspicious exceptions and export a Windows …
How to Enable Automatic Security Updates on Ubuntu
How to set up unattended-upgrades on Ubuntu: install it, limit it to security patches, reboot automatically at 3 AM and …
Conficker: The Worm That Exploited Windows Flaw MS08-067
On Oct 23, 2008 Microsoft shipped an out-of-band patch, MS08-067. Conficker used that flaw on millions of PCs. Here's …
BadUSB: how a USB drive becomes a hacker keyboard (and defenses)
BadUSB and Rubber Ducky make a USB drive type commands on its own. See how it works, the FIN7 case, and how to block and …
Get-ScheduledTask: find suspicious scheduled tasks on Windows
Use Get-ScheduledTask in PowerShell to list scheduled tasks, spot malware persistence and see what each one runs. …
How to set up the UFW firewall on Ubuntu in 5 steps
How to set up UFW on Ubuntu: default policy, allowing SSH without locking yourself out, rate-limiting brute force, …
Google Dorks: How Hackers Find Exposed Data Using Search Queries
Google Dorks use advanced operators to expose files, passwords, and admin panels indexed by Google. Learn how it works …