How-To Articles

How-To Articles

How-To Articles

Tor Privoxy Gateway Turnkey OVA VM Available for Download

I created a quick, lightweight ready to deploy Turnkey OVA appliance and added it to our useful ready to go OVA library! Want to quickly deploy a dedicated Anonymous Surfing VM on your LAN to allow multiple users to seamless go out through a Tor Privoxy linked Gateway on Steroids?

How-To Articles

ThePhish : Open Source Automated Analysis & Detection Platform Demo Video

CORRECTION: After I did the Video, no retries, caught a slight error. TheHive and Cortex MISP entries in some files were not "LOCALHOST" they were the hostname of the docker container only reached within the Docker Network. "THEHIVE" and "CORTEX" & MISP respectively. You

How-To Articles

Greenbone OpenVAS Turnkey OVA VM

I wrote an article in early 2023 on how to setup your own OpenVAS Open Source Vulnerability Scanner. While it was very helpful to most, you still had to go through the steps of installing Linux, updating it, installing docker, creating a docker compose file. Starting the stack, making sure

How-To Articles

NGINX Monitoring with Grafana, Prometheus and Telegraf HowTo

Some users may be looking for a cheap free alternative to monitoring basic NGINX stats for multiple sites, without having to get a paid expensive solution like Datadog, LogicMonitor or other APM tools. Or perhaps even going the official method using something like NGINX amplify or Nginx Plus etc, Amplify

How-To Articles

Zabbix 7 LTS Install and Setup with Nginx & LetsEncrypt SSL on Ubuntu 24.04

Zabbix 7 LTS is here, and its been a while since I checked out the Zabbix Platform and wanted to see the improvements they have made. Specifically one of the more popular and touted features of version 7 is the Web Synthetic monitoring, RUM type features. I have used other

How-To Articles

OpenCTI Turnkey VirtualBox OVA available!

Updated 11/07/24 : Updated OpenCTI to ver. 6.3.10 and VM to Ubuntu 24.04 LTS Desktop! I made it even easier to get started with OpenCTI, so I created a fully turnkey ready to go VirtualBox VM OVA, with Host OS, Docker and now updated to OpenCTI

How-To Articles

reNgine Reconnaissance Suite and Vulnerability scanner Turnkey OVA.

reNgine Easy Installation Setup using prebuilt VirtualBox OVA Template UPDATE : Sept 8th 2024 Created a new OVA/VM appliance using Ubuntu 24.04 LTS desktop, with reNgine 2.2.0 installed and configured ready to go! Works much better, newest version fixed alot of bugs in the celery and scanning

How-To Articles

Monitoring 365 events with Wazuh with Multiple Tenants.

Preface I am going to show you how to setup monitoring of 365 events in Wazuh in this blog post. Some important things to know before we get started. This tutorial will assume you are using a newer Wazuh version with the native components installed using wazuh-indexer (opensearch), not older

How-To Articles

OpenStreetMap Server Self Hosted Setup Guide HowTo.

So I wanted to do a quick write up on this really cool self-hosted open source map tile server. When your done, you will prefer it over google maps! Let's be clear, this is a very powerful platform, and you can import just about any type of data,

How-To Articles

OpenCTI Performance and Tuning Observations.

As many know, I have been running a public instance of OpenCTI for the last few months. During this time I have been constantly upgrading the OpenCTI as new releases come out, experiment with things and load test. Meanwhile updating the howto article, and the docker-compose and .env variables as

How-To Articles

Wazuh. Detecting Malicious activity on web/cloud servers.

This is not a full howto, more of a quick demonstration of how Wazuh can put eyes on your web server's, cloud services etc. In my case, I got a few email alerts of level 12 and above wazuh alerts in regards to my Blog Server. We have

How-To Articles

OSINT Web Check Analyzer

So I stumbled upon a wonderful Open Source project on Github, that somehow had over 6k+ stars, and I missed it! This little Gem was written by a brilliant young lady named Alicia Sykes. You can read more about this young accomplished software engineer here. What really struck me about

How-To Articles

MIST CE. Easy Multi-Cloud Management HowTo.

What is Mist? Mist simplifies Multi Cloud Management. It offers a unified interface from where you can manage public clouds, private clouds, hypervisors, containers and bare metal servers. With Mist you can perform common management tasks like provisioning, orchestration, monitoring, automation and cost analysis. It comes with a RESTful API

How-To Articles

Mageni Vulnerability and Attack Surface Management Platform.

Mageni has been growing on me lately, and honestly I like it better than OpenVAS now. For those of you who followed my "OpenVAS howto", install article with the almighty Greenbone OpenVAS scanner, I think you will like this! Now, there are some pro's and cons

How-To Articles

Sn1per. An All in One offensive security framework Howto.

What is Sn1per aka Sniper? Is it touted as the "Ultimate Pentesting Toolkit". Not only does this do vulnerability scanning like OpenVAS does, it also comes with many modules to do much more. From OSINT, information gathering, Attack surface mapping and discovery, and has automated attack testing for

How-To Articles

FESS Enterprise Search. An Open Source Google Search Appliance Replacement.

What is Fess?  Fess is an Open Source self hosted Internal Search Engine solution. Think of it as having your own Internal Google Search Appliance that is free and Open Source!  With FESS you can fully customize the interface, and configure a bunch of crawling sources including files locally or

How-To Articles

Using our Email Header Analyzer Howto

There are a couple MX / Mail Route Diagnostic tools on the internet, the most famous you probably have heard of is MXtoolbox.  These tools can come in handy to troubleshoot mail delivery issues, see where there are delays or problems, and even aid in potential phishing email analysis.   To that

How-To Articles

KASM Workspaces Howto Installation and Usage

One of the cooler and less known tool and platform I use regularly, and has many uses for Cybersecurity professionals, Developers and learning purposes is KASM Workspaces. What is it? Kasm Workspaces is a docker container streaming platform that enables you to deliver browser-based access to desktops, applications, and web

How-To Articles

MSP and Business Automation with N8N platform

What is n8n? n8n is an open-source, node-based automation platform that allows users to automate complex workflows quickly and easily. With n8n, you can create custom workflows using visual methods, (think visio), connecting different services and triggering actions based on specific events. It is similar to Zapier and other Cloud

How-To Articles

ASN OSINT Trace Route tool on Steroids

After writing the 60 Hudson Street article, I stumbled across this awesome command line tool to do OSINT on network path traversal.  Some of the capabilities of this tool are ASN / RPKI validity / BGP stats / IPv4v6 / Prefix / ASPath / Organization / IP reputation / IP geolocation / IP fingerprinting / Network recon / lookup tool / Internet

How-To Articles

How To use our Free Password Pusher Secure Site

Password Pusher, what is it you ask? It is a secure way to send Passwords to a person in an email without actually having the password itself in the email body where it is not secure. DO NOT EVER send passwords in an email or via SMS or any other

How-To Articles

The Hive 5 & Cortex HowTo

Credit: Some of the screenshots in this article have been taken from Official documentation from Strangebee, some are my own custom screenshots to make the writing of this article easier. Let's start with a little background, The Hive and Cortex have been around for a few years, more

How-To Articles

OpenCTI Threat Intel from another Planet?

So I thought I would post what OpenCTI can show us, visually, the correlations and the cool benefits of when you setup your own OpenCTI instance.  Just how neat of a platform it is, compared to MISP or Yeti for comparison.  It is a real time, dynamically updated, powerful database

How-To Articles

OpenVAS Vulnerability Scanner Setup

In this article, I am going to show you how to setup your own dedicated Vulnerability Scanner Platform in a Linux VM with VPN for anonymity. NOTE: VPN setup is outside the scope of the article, although its very easy, just follow the VPN providers setup instructions for your Linux

How-To Articles

Nikto Web Vulnerability Scanner

Nikto, what is it? Its one of my favorite CLI driven Web Vulnerability scanners to check thousands of best practice setup variables and vulnerabilities. It is used to proactively check and give insights on what you need to change to secure that website to the highest level you can. While