AI Sidekicks: What it's really like using an AI Assistant on My Coding Projects

A practical look at using AI assistants in coding work: where they help, where they slow down, and what needs human review.

11 May 2025 · 3 min

Migration from Ghost to Zola SSG

Notes from moving a site from Ghost to a static site generator, with lessons on content, maintenance, and deployment.

31 January 2025 · 4 min

How to Install Wordfence: Step-by-step guide

This step-by-step guide on how to install the Wordfence plugin will enable the standard recommended security settings for your WordPress website quickly and keep it safe from potential threats.

15 March 2024 · 5 min

AI-Powered Security Assistant with Ollama and Mistral - Locally

By setting up locally, revolutionize your security automation with the help of AI-powered assistants, Ollama + Mistral. Enhancing safety through through technology.

21 February 2024 · 9 min

WordPress Scan for Vulnerabilities: A Comprehensive Guide for Site Security

WordPress scan for vulnerabilities article will guide you with step-by-step approaches and examples that can be implemented on your website to scan and identify vulnerabilities. Also, additional information about security measures, tools, and plugins is available.

5 February 2024 · 18 min

Bug Bounty vs Pentest: Making an Informed Decision on Security Testing

Both bug bounty and pentest play crucial roles in identifying and addressing security vulnerabilities, but they differ in their approaches. Understanding these differences helps you choose which type of security testing best suits for organizations or hackers who want to get into security testing.

14 January 2024 · 12 min

About Information Security Awareness & Education

A simple introduction to security awareness and why everyday habits matter for protecting personal and work data.

29 April 2023 · 4 min

Challenge 14: XSS bypass blacklisted JS function

This article goes into depth discussing an alternative JavaScript function, namely “confirm()”. It serves as an alternative for the JavaScript “alert()” function when the latter is unavailable.

21 March 2023 · 4 min

Challenge 13: XSS in HTML Anchor Tag

Check out how a security risk can arise from an improperly configured dynamic link generation tag and which can result in XSS exploitation.

16 March 2023 · 4 min

Challenge 12: XSS CSP bypass through remote payload

Learn how to bypass a misconfigured CSP policy and how it can lead to the successful exploitation of cross-site scripting vulnerability.

11 March 2023 · 5 min

Challenge 11: XSS CSP bypass through an inline script

Learn how a misconfigured CSP can be bypassed, potentially leading to the successful exploitation of cross-site scripting vulnerability.

4 March 2023 · 5 min

Challenge 10: XSS bypass backslash escape

Check out how the XSS can be exploited in the HTML tags and learn more about tag-based XSS payload.

28 February 2023 · 5 min