SECURITY .FURYBEE
Cybersecurity resources — guides, scripts, and tools to protect your systems.
▸ Latest Articles
Honeypots and Canary Tokens: Cheap Detection That Actually Works
Deploy low-interaction honeypots, canary tokens, and honey accounts to get high-confidence intrusion alerts with almost no false positives and minimal ongoing cost.
NIS2 and DORA: What European Cyber Regulation Means for Your Stack
A practical, non-legal overview of NIS2 and DORA scope, obligations, and reporting expectations, mapped to concrete technical controls engineering teams can implement.
Secrets in Git: Detection, Rotation, and Rewriting History
How to catch API keys and passwords before they hit a commit, what to do the moment one leaks, and why rewriting git history never replaces rotating the credential.
SSH Hardening Beyond Disabling Passwords: Certificates, Bastions, and Mesh VPNs
Move past PasswordAuthentication no toward SSH CA certificates, jump-host bastions with session recording, and mesh VPNs that remove SSH from the public internet.
XSS in 2026: Content Security Policy, Trusted Types, and Framework Escape Hatches
A practical look at reflected, stored, and DOM XSS today, and how nonce-based CSP, strict-dynamic, and Trusted Types close the gaps frameworks leave open.
Threat Modeling with STRIDE: A Practical Walkthrough for a Real Web Stack
Apply the STRIDE framework to a realistic Docker Compose stack (proxy, web app, Postgres, Redis, object storage) with a data-flow diagram and a mitigation table.
⟨/⟩ Scripts & Tools
Lightweight Intrusion Detection System (LIDS)
A Bash script to monitor critical system files for unauthorized changes using SHA-256 hashes.
Security Log Analyzer
A Python script that parses auth.log and syslog to detect brute-force attempts, suspicious logins, and privilege escalation events.
Firewall Audit Script
Automated script to audit iptables/nftables and UFW firewall rules, detect overly permissive configurations, and generate a security report.
SSL Certificate Checker
A Bash script to check SSL/TLS certificate expiration dates, cipher suites, and common misconfigurations across multiple domains.
SSH Hardening Script
Automated script to harden your Linux server's SSH configuration. Applies security best practices in a single command.
Port Scanner Bash
A simple and efficient port scanner written in Bash. Ideal for quick checks with no external dependencies.