Personal website of Pablo González, a Python backend engineer sharing practical guides on APIs, microservices, Linux, security, and building reliable systems.
How my server started as a book library with Calibre and Kavita, then grew into a full media homelab with Jellyfin, Arr automation, a reverse proxy, and operations tooling — one folder per service, all in Docker Compose.
A guide to setting up a static website using Hugo with a domain from Namecheap, Cloudflare DNS, Cloudflare Pages, and Umami for analytics.
A comparison between microservices and monolithic architectures.
Software Development Best Practices including Agile, DevOps, CI/CD, TDD, BDD, DDD, Clean Code, SOLID, Design Patterns, Refactoring, Code Smells, Code Review, Pair Programming, Mob Programming, etc.
How to setup Wireguard server and client the easy way.
Beginner-friendly cryptocurrency notes covering risk management, strategy basics, and practical lessons learned.
Today there are numerous attack strategies and patterns: ramsonware,DDoS, rootkits, cryptomining programs, botnets... including physical attacks. In this post, I'll try to show you numerous things to take in consideration when hardening a Linux system.
Step-by-step Linux email server setup with Postfix, Dovecot, and Roundcube, including installation, configuration, and security basics.
Practical Apache web server guide covering installation, core configuration, virtual hosts, TLS basics, and hardening on Linux.
Quotas are necessary as in a multi-user system limits allow to distribute space to each user. This way, everyone has the same conditions. As administrators, we don't want a user to upload all his movies to the system and block system resources for other users.
In this post I'll explain with detail how Unix uses *initd* or *systemd* to manage the boot/shutdown process: runlevels, targets, and how to run a script/program at certain points like boot or shutdown.
A backup or backup is the safe copy of a digital file, a set of files, or all of the data considered important enough to be preserved.
System auditing allows to save information in logs about different interactions of the system (like crashes, logins, reports of services, etc.) and use to investigate incidents on the system.
Systems Monitoring is in charge of continuously monitoring different resources and services of the computer, to guarantee the required level of availability and alert administrators in case of failure. Its objective is to ensure that the system works correctly and to minimize the downtime of a service.
Linux filesystem fundamentals: inodes, directory hierarchy, partitions, and essential commands for navigating and managing storage.
BadUSB with a cheap Arduino DigiSpark! (4€)
Fail2ban scans log files and bans IPs that show the malicious signs (too many password failures, seeking for exploits, etc). Generally Fail2Ban is then used to update firewall rules to reject the IP addresses for a specified amount of time.
Installing an SSH server can be very useful to manage your files from outside home and knowing it encrypts the traffic one can remain relieved that the data is secure. Today we are going to install one and secure it!
Doing advanced searches with the use of Google Operators nowadays is a must to be able to extend and improve our findings. From searching for a specific filetype such a pdf or a png image, to use it for hacking and bug bounty!
Curated Bash aliases to speed up daily Linux workflows, reduce repetitive commands, and improve terminal productivity.
Markdown cheatsheet with practical syntax examples for headings, links, tables, code blocks, and everyday technical writing workflows.
Guide to downloading video streams from m3u8 playlists using VLC and command-line methods, with troubleshooting for segmented media.
Writeup for Nineveh machine from HTB
Writeup for Friendzone machine from HTB
Writeup for Cronos machine from HTB
Writeup for Valentine machine from HTB
Writeup for Bashed machine from HTB
Writeup for LaCasaDePapel machine from HTB
Data exfiltration techniques and command patterns used in post-exploitation to collect files, credentials, and sensitive host information.
Writeup for Shocker machine from HTB
Writeup for Solidstate machine from HTB
Writeup for Traceback machine from HTB
Writeup for Magic machine from HTB
Writeup for Blunder machine from HTB
Writeup for Irked machine from HTB
Writeup for Lame machine from HTB
Practical 13.56 MHz RFID overview covering common card technologies, attack surface, and cloning/testing techniques for NFC access systems.
Introduction to 125 KHz low-frequency RFID basics, attack surface, and practical cloning/testing notes for common access-control tags.
Rogue Access Point walkthrough covering fake hotspot setup, credential-capture flow, and practical wireless MITM testing considerations.
Bash scripting cheatsheet with common syntax, conditionals, loops, functions, and command-line patterns for quick shell automation tasks.
Pentest cheatsheet with practical post-exploitation and privilege-escalation techniques, including TTY upgrades, shell escapes, and Linux escalation paths.
Port pentesting cheatsheet for common services, with quick enumeration and exploitation tips for FTP, SSH, web, SMB, DNS, and database targets.
Writeup for Active machine from HTB
About Pablo González: backend-focused computer engineer, current work, interests, and links to resume and contact.
Resume of Pablo González, backend engineer with experience in Python, APIs, system architecture, and software delivery.
Tools, software, and equipment I use regularly.