Cloud Security Cloud Metadata Service (IMDS) Attacks via SSRF: Stealing Credentials and Defending IMDSv2
How attackers pivot from SSRF to cloud credential theft through 169.254.169.254, and how IMDSv2 and hop limits stop them.
2025-09
Cloud Security 
Cloud Security Cloud Logging and Detection: Attacking and Defending CloudTrail and GuardDuty
How attackers blind CloudTrail and evade GuardDuty, and how blue teams close the detection gaps.
Cloud Security Attacking AWS STS, AssumeRole, and Cross-Account Trust
How sts:AssumeRole, weak trust policies, and missing ExternalId enable cross-account pivots, plus blue-team detection.
Containers & DevSecOps Docker Security Fundamentals and Hardening: From Capabilities to Rootless Containers
A practical guide to hardening Docker: Linux capabilities, seccomp, rootless mode, --privileged risks, and image scanning.
Containers & DevSecOps Advanced Container Escape Techniques: From CAP_SYS_ADMIN to Host Root
A practical look at advanced container escape primitives — release_agent, /proc abuse, host mounts, and runc CVEs.
Containers & DevSecOps Kubernetes RBAC Attacks: Privilege Escalation from a Compromised Service Account
How attackers abuse Kubernetes RBAC roles, bindings, and service account tokens to escalate to cluster-admin, and how to defend.
Containers & DevSecOps Attacking the Kubernetes API Server and etcd: A Practical Offensive Guide
Hands-on offensive techniques against the Kubernetes control plane: anonymous auth, etcd secret extraction, kubelet API, and exposed dashboards.
Containers & DevSecOps Breaking and Hardening Kubernetes Pods: Pod Security Standards, OPA Gatekeeper, and Kyverno
An offensive and defensive tour of Kubernetes pod admission control: Pod Security Standards, securityContext, OPA Gatekeeper, and Kyverno.
Containers & DevSecOps Auditing Kubernetes Clusters with kube-bench and kube-hunter
A practical guide to auditing Kubernetes for CIS benchmark gaps and exploitable misconfigs, then remediating them.
Containers & DevSecOps Securing the Software Supply Chain: SBOM, Sigstore, and SLSA in Practice
A hands-on guide to attacking and defending the software supply chain with SBOM, cosign, Sigstore, and SLSA.
Containers & DevSecOps Attacking CI/CD Pipelines: Exploiting GitHub Actions and Jenkins
A practical offensive and defensive walkthrough of pwn requests, PPE, secrets exfiltration, and OIDC abuse in GitHub Actions and Jenkins.
Containers & DevSecOps Secrets Management and Hunting Leaked Secrets in Git
Hunt leaked credentials in git history with gitleaks and trufflehog, then lock them down with HashiCorp Vault.
Containers & DevSecOps Infrastructure as Code Security: Hunting Bugs in Terraform with tfsec and Checkov
A practical guide to attacking and defending Terraform: state file secrets, drift, least privilege, and IaC scanning with tfsec and Checkov.
Mobile API OSINT Android Application Pentesting: Lab Setup and APK Internals
Build a reproducible Android pentest lab, learn APK structure and AndroidManifest, and triage apps with adb and MobSF.
Mobile API OSINT Reversing Android Apps: apktool, jadx, and Frida in Practice
A practical workflow for static and dynamic Android reversing with apktool, jadx, and Frida — plus blue-team defenses.