Brain Dump
187 / 187 entriesAuthentication Vulnerabilities
Authentication is about confirming the user is who they claim to be. Here are the seven ways applications get it wrong, and how to hunt for each one.
NGINX vs Apache
Apache forks a process per request; NGINX handles thousands asynchronously. A walkthrough of how the two servers differ, plus NGINX basics.
SQL Injection 101
From basic concepts to data extraction — everything you need to understand SQL injection attacks and how to prevent them.
DNS for Dummies: Part 1
What DNS is, why the internet needs it, and the record types worth knowing — a standalone primer, since the rest of that series never got written.
F5 BigIP Software Update Checklist
Step-by-step checklist for updating firmware on F5 BigIP appliances — from ISO import to traffic verification.
Cisco Packet Tracer Basics
Building a simple network in Packet Tracer, getting the physical view, and simulating ICMP, ARP and HTTP traffic between your devices.
How DNSSEC Works
DNSSEC signs DNS records, not individual records but whole record sets. Here's how RRSETs, zone-signing keys and RRSIG records fit together.
Software Defined Networking
SDN moves the control plane out of every switch and into one controller, so you manage a network as software instead of logging into boxes one at a time.
Understanding Half Proxy
In a half proxy setup, the load balancer intercepts the client's request, forwards it to the server, but the response from the server bypasses the load balancer and is sent directly to the client. This setup is used in specific scenarios where performance gains are desired, but it introduces challenges like asymmetric routing. But what is asymmetric routing?