Getting started with environment variables - part 4 (Case Sensitivity)

-

Popular posts from this blog

What Happens Under the Hood of SSH Connections? Analyzing SSH Packets with Wireshark.

-
Image
Prerequisites Before we dive into packet analysis, make sure you have the following set up: Two Endpoints (VMs or Containers) Wireshark tcpdump It’s also important to have a basic understanding of: TCP SSH Linux Introduction In this blog post, I'll guide you through the step-by-step process of analyzing SSH connection packets using Wireshark. Whether you're troubleshooting SSH issues or simply curious about how SSH works at the protocol level, this tutorial is for you. We'll cover both successful and failed SSH connections, examining the packet flow and explaining what’s happening in the background. I've already set up a working environment for this use case. Let’s dive right into packet capture and analysis, and uncover what happens during an SSH connection. Fig. 1: A list of servers with roles and IP addresses for quick network reference. Breaking Down Packet Capture and Analysis: A Step-by-Step Guide In this post, we'll break down the process of packet capture...
Read more

Telnet Under the Microscope: Why It's Unsafe for Modern Use

-
Image
Telnet, an early protocol for remote server and device access, was once groundbreaking. However, in today’s era of cybersecurity threats, Telnet’s lack of encryption has made it obsolete and dangerous to use. This blog will demonstrate the security risks of Telnet by capturing and analysing its unencrypted communication over a network. We Will: Create two Ubuntu instances using Multipass. Install and configure a Telnet server on one instance. Create a user and password on the server. Capture network packets while authenticating to the server. Analyse the captured packets to show how credentials are sent in plain text. Part 1: Introduction and Setting Up Ubuntu Instances In Part 1 , we start by setting up Ubuntu instances using Multipass . We walk through the process of creating a Telnet server and Telnet client , preparing the environment for the next steps. Watch the video here: In Part 2 , we install and configure the telnetd package on the Telnet server . This is the crucial step...
Read more

Jenkins Secret Injection: A 3-Part Demo with Real-World Pitfalls

-
Image
 In this demo series, I walk through how secrets are handled in Jenkins the good, the bad, and the risky. Watch and learn how a masked secret can still leak silently if not used carefully.  Creating Jenkins Credentials In the first video, we walk through the creation of a secret credential in Jenkins: ✅ What we did : Navigated to Manage Jenkins > Credentials Added a new Secret Text credential Gave it a recognizable ID (e.g., secret-demo ) 🔐 Why it matters : This is the first and most important step to make secrets securely available to Jenkins pipelines without hardcoding them. Injecting and Echoing Secrets in Pipelines In the second video, we created a Jenkins Pipeline Job named secret-injection and injected the secret using the withCredentials block. Jenkins warned us: A secret was passed to "echo" using Groovy String interpolation, which is insecure. 🛡️ Jenkins masks the secret in logs ( **** ) and alerts developers not to use Groovy string i...
Read more