Developer. Because Superhero is not an official job title.
Security alerts are supposed to make systems safer. But sometimes they do something else: they quietly consume hours of engineering time investigating issues that turn out to be exaggerated or practically unexploitable. Recently, I spent a full day triaging one such vulnerability report. The alert flagged a serious issue in a WordPress plugin—an Unauthenticated Local File Inclusion (LFI)…
Not all compliance guidance is technically correct. A DISA STIG remediation for Ubuntu 22.04 LTS recommends applying permission mode 2640 to systemd-journal directories — a setting that removes execute permissions and can disrupt core logging functionality. This post examines the issue in detail, explains why the recommendation is flawed, and outlines a safer, technically sound approach for…
Keeping your origin server properly locked down is an important step when running behind Cloudflare. This post explains how to automatically maintain Cloudflare's constantly changing IP ranges using `ipset`, and how to integrate them with UFW so that only Cloudflare's proxy network can reach your web ports. With boot-time restoration and scheduled updates, you can prevent direct-to-origin access,…
Wazuh decoders for the Uncomplicated Firewall (ufw) from Ubuntu 24.04 do not work because they expect a different format of log entries. This article explains how to fix this with custom decoders and custom rules. The post Wazuh and UFW in Ubuntu 24.04 appeared first on Wild Wild Wolf .
Stay at 127.0.0.1. Wear a 255.255.255.0. The post Write-up: Lockdown appeared first on Wild Wild Wolf .
"We sell hundreds of DeceptiPots to the world every month, but we don't even use them in our network. Show me the value of our product, test it well, and schedule the demo. Deadline - next Monday!" This is the task Emily Ross received from the company CEO. As a newly hired junior IT personnel at DeceptiTech, Emily didn't really know what to do but still decided to prepare for the demo: Configure…
Your local sticker shop has finally developed its own webpage. They do not have too much experience regarding web development, so they decided to develop and host everything on the same computer that they use for browsing the internet and looking at customer feedback. Smart move! The post Write-up: The Sticker Shop appeared first on Wild Wild Wolf .
Can you utilize your web pen-testing skills to safeguard the event from any injection attack? The post Write-up: Injectics appeared first on Wild Wild Wolf .
Never click on links received from unknown sources. Can you capture the flags and get admin access to the web app? This challenge will test client-side exploitation skills, from inspecting JavaScript to manipulating cookies to launching CSRF/XSS attacks. The post Write-up: Whats Your Name? appeared first on Wild Wild Wolf .
Shhh. Be very very quiet, no shouting inside the biblioteca. The post Write-up: Biblioteca appeared first on Wild Wild Wolf .