Articles

Technical articles

Documentation, investigations, and technical tutorials based on the cybersecurity lab practices.

Filter by category
Home LabLinux

Using Nmap to identify open ports in a Docker environment

In this lab, I used Nmap to identify open ports on a Linux server, investigated the exposed services with lsof, and linked the discovered ports to running Docker containers.

June 30, 202615 min
Read article
Home LabLinux

Analyzing network traffic with Wireshark in my cybersecurity lab

In this lab, I used Wireshark to capture and analyze network traffic between my MacBook and a Linux server, observing ICMP packets, SSH connections, TCP handshakes, and traffic generated by an Nmap scan.

June 30, 202616 min
Read article
Home LabLinuxLogs

Analyzing SSH authentication logs in Linux

In this lab, I analyzed SSH authentication logs on Ubuntu using journalctl, identifying successful logins, session opening and closing, failed password attempts, and connection source IPs.

June 15, 202612 min
Read article
Home LabLinux

Understanding IP, ports and firewall in practice with Ubuntu and UFW

A practical deep dive into managing firewall rules (UFW) in Linux, exploring how protocols and ports relate to protecting a network environment.

June 14, 20268 min
Read article
Home LabLinuxNetworks

Configuring SSH access between MacBook and Ubuntu in my cybersecurity lab

In this lab, I configured remote SSH access between a MacBook and an Ubuntu machine on the local network. The goal was to practice concepts of IP, ports, SSH service, UFW firewall, and connectivity diagnostics.

June 11, 202614 min
Read article