ELK Setup, Log Ingestion & Attack DetectionRequired Tasks Installing & configuring Elasticsearch Installing & configuring Kibana Connecting Elasticsearch with Kibana Installing & configuring Fluentbit Installing & Configuring Winlogbeat Writing detection rules & simulating a suspicious ...Oct 8, 2025 路 3 min readnaderelgezawy1.hashnode.dev
Detection Rules Using SnortTask : Writing 3 different detection rules for detecting any executable download (IDS MODE) Snort Installation : Writing rules in Snort : nano /etc/snort/rules/local.rules and paste alert tcp any any -> any 80 (msg:"Executable Download Detected...1BOct 7, 2025 路 1 min readnaderelgezawy1.hashnode.dev
block all traffic to/from a domain by Bash ScriptTarget: Create a Bash script to block all traffic to/from a domain Youtube by resolving its IPs , then save the info to a file. Setup Environment First of all I create a directory for the task and create the script file with the extension .sh ...Oct 6, 2025 路 1 min readnaderelgezawy1.hashnode.dev
Step-by-Step: Kali Attacks vs (WAF) on Ubuntu using Nginx & ModSecurity with OWASP Core Rule Set (CRS)sa sudo apt install -y git gcc g++ make automake autoconf libtool libpcre3 libpcre3-dev \ libxml2 libxml2-dev libyajl-dev pkgconf zlib1g zlib1g-dev libcurl4-openssl-dev \ libgeoip-dev liblmdb-dev libfuzzy-dev liblua5.3-dev libpcre2-dev nginx wget cur...Oct 3, 2025 路 1 min readnaderelgezawy1.hashnode.dev
MAC SpoofingTarget : Change the Logical MAC Address Every 3 Minutes on Windows MAC Spoofing With Python import ctypes, sys, subprocess, random, time INTERFACE = "Wi-Fi" def is_admin(): try: return ctypes.windll.shell32.IsUserAnAdmin() except: ...Oct 3, 2025 路 2 min readnaderelgezawy1.hashnode.dev
