Detecting a Compromise with Basic Linux Tools
The blue-team portion of a Meterpreter lab, shifting from attacker to defender: using nothing but standard Linux commands to investigate whether a system shows signs of compromise. What I did Acting a
Latest articles
Exploitation Basics with Metasploit: Understanding Payloads, Reverse Connections, and Meterpreter
Metasploit is one of the tools I have been learning as part of my cybersecurity training. It provides a framework for understanding how exploitation works and how security professionals can assess sys
Reconnaissance and Automation: Tying User Management, OSINT, and Python Together
Most of the individual labs I've worked through recently each focused on one tool or one specific technique in isolation. This final project pulled three genuinely different skill areas together into
Wrapping Nmap in Python: Turning a Manual Tool Into a Repeatable Script
Nmap is powerful on its own, but using it well still means remembering the right flags, typing the full command correctly every time, and manually redirecting output somewhere useful if you actually w
Writing a Basic Maintenance Script in Python: Automating a Check Nobody Wants to Do Manually
Some of the most useful scripts in system administration aren't clever or complex, they're just the thing nobody wants to check manually, every day, forever. Disk space is a perfect example: running o
Four Attacks, One Tool: Reading the Story Packets Tell
A packet capture is just a recording, raw traffic, frozen in time, with no built-in explanation of what any of it means. This lab worked through four completely different network attack patterns, cred
Finding an Attacker in a Snapshot of Memory: RAM Forensics with Redline and Volatility
Every disk-based forensic technique I'd worked through earlier in this series shared one limitation: a disk image only shows what was written to storage. A sophisticated attack often doesn't look like
Recovering a Deleted Partition: What's Really Lost When a Partition Disappears
Deleting a disk partition feels, to an attacker trying to cover their tracks, like a clean way to make an entire set of files disappear at once. One action, and a whole section of the disk, every file
File Carving: Recovering Files That No Longer Have a Name
Every recovery technique I'd worked through earlier in this forensics series depended on the file system still knowing something about the file in question, a deleted entry that could be found, a hash