Complete Terraform Guide (2025): From Installation to Destroy – AWS EC2 Project Complete Terraform Guide (2025): From Installation to Destroy – AWS EC2 Project This guide walks through a real Terraform workflow: installing Terraform on Linux, designing a clean project structure, deploying AWS infrastructure using modules, verifying the setup, and safely destroying everything. The approach follows real-world DevOps and cloud security best practices. Table of Contents Overview Why Terraform Matters Terraform Installation (Linux) Project Structure Best Practices Provider Configuration Variables and tfvars VPC Module Explained EC2 Module Explained Root Module Wiring Deployment Workflow Verification Destroying Infrastructure Ethical and Security Notes Defensive Checklist Conclusion 1. Overview Terraform is an Infrastructure as Code (IaC) tool that allows you to define cloud infrastructure using configuration files. Instead of clicking th...
Posts
Apache Tomcat Installation on Linux AWS EC2 (2025): Step-by-Step Guide on Ubuntu Apache Tomcat Installation on Linux AWS EC2 (2025) This guide explains how to install Java, set up Apache Tomcat 9, configure a custom port, and verify the installation step by step on an Ubuntu-based AWS EC2 instance. Table of Contents Environment Details Connect to EC2 Instance Update System Packages Install Java (OpenJDK 11) Create Dedicated Tomcat User Download Apache Tomcat 9 Extract Tomcat to /opt Configure Custom Tomcat Port Create systemd Service Verify Tomcat Service Check Tomcat Version AWS Security Group Configuration Access Tomcat in Browser Access Tomcat Manager GUI Notes on /docs 403 Error Final Outcome 1. Environment Details Cloud: AWS EC2 (Free Tier) Operating System: Ubuntu Server Java Version: OpenJDK 11 Tomcat Version: Apache Tomcat 9.0.89 Custom Port: 8090 Access: SSH using PEM key 2. Connect to EC2 Instance Connect to t...
WEP Cracking Lab (Conceptual) (2025): Complete Guide + Cheat Sheet for OSINT & CyberSEC WEP Cracking Lab (Conceptual) (2025): Complete Guide Defensive, educational lab walkthrough — conceptual only. This post deliberately omits executable commands and operational how-to steps. It focuses on why WEP fails, how to build an authorized environment, and how defenders can detect and mitigate legacy WEP. Table of Contents What WEP is and why it is insecure Lab Setup Scanning Networks Capturing IVs Fake Authentication ARP Replay Attack Client Deauthentication Cracking the WEP Key (Concept) Tips, Warnings & Placeholders Conclusion 1. What WEP Is and Why It Is Insecure WEP (Wired Equivalent Privacy) was the first Wi-Fi encryption standard. It is now obsolete due to fundamental cryptographic flaws. IVs (Initialization Vectors) WEP uses a small 24-bit IV added to the shared key. Because the IV is too small, it repeats quickly. Why IV Reuse Breaks WEP ...
Scanning Networks (CEHv13, 2025): Complete Guide + Cheat Sheet for OSINT & Cybersecurity Scanning Networks (CEHv13, 2025) CEHv13 Module 03–aligned practical guide: host discovery, scan types, Nmap usage patterns, evasion techniques overview, and defensive detection & mitigation. For authorized testing and defensive validation only. Table of Contents Executive Summary CEHv13 Learning Objectives (Module 03) Core Concepts & TCP/IP Review Scan Types (CEH taxonomy) Tools & Practical Nmap Recipes Evasion, Spoofing & IDS Interaction (high-level) Interpreting Results & Red/Blue Actions Detection, Logging & Defensive Controls Authorized Examples & Lab Commands Operational Playbook & Report Template Conclusion & Next Steps Executive Summary This CEHv13-aligned module distills the scanning phase: plan and authorize, gather passive OSINT, perform low-noise discovery, run targeted enumeration, validate resu...
Google Dorking (2025): Complete Guide + Cheat Sheet for OSINT & Cybersecurity Google Dorking (2025): Complete Guide + Cheat Sheet for OSINT & Cybersecurity Professional, ethical, and practical — operators, examples, and defensive workflows to find and remediate exposed assets. Table of contents Overview — What is Google Dorking? Why it matters How it works (operators) Cheat-sheet (visual reference) Top 12 practical dorks Examples & safe usage Legal & ethical rules Operational checklist Conclusion Overview — What is Google Dorking? Google Dorking uses advanced search operators to locate publicly indexed files, directories, and pages that were unintentionally exposed. It’s an OSINT technique used by security teams to discover configuration files, backups, admin panels, and other sensitive assets without hacking — simply by searching. Why it matters Misconfigurations and public clo...