GeekyRyan

Linux pipes only work within the same process family tree.

DNS problems in Kubernetes are some of the most frustrating issues to chase down.

Ingress NGINX is being retired.

Phase 1 of modernizing a legacy application configuration orchestration system - the scripts and automation that provision databases, apply configuration, and run SQL changes across environments.

Critical CVE in Linux copy_file_range hit both Nginx VMs and AKS Linux nodes.

HackTheBox Web Application Fuzzing - VHost Fuzzing Link to heading This is part of a multi-part series documenting my process for completing the HackTheBox modules.

HackTheBox Web Application Fuzzing - Value Fuzzing Link to heading This is part of a multi-part series documenting my process for completing the HackTheBox modules.

HackTheBox Web Application Fuzzing - Sub-domain Fuzzing Link to heading This is part of a multi-part series documenting my process for completing the HackTheBox modules.

HackTheBox Web Application Fuzzing - Parameter Fuzzing Link to heading This is part of a multi-part series documenting my process for completing the HackTheBox modules.

HackTheBox Login Brute Force - Skills Assessment Part 2 Link to heading This is part of a multi-part series documenting my process for completing the HackTheBox modules.

HackTheBox Login Brute Force - Skills Assessment Part 1 Link to heading This is part of a multi-part series documenting my process for completing the HackTheBox modules.

HackTheBox Login Brute Force - Medusa Link to heading This is part of a multi-part series documenting my process for completing the HackTheBox modules.

HackTheBox Login Brute Force - Hydra Link to heading This is part of a multi-part series documenting my process for completing the HackTheBox modules.

HackTheBox Login Brute Force - Dictionary Attacks Link to heading This is part of a multi-part series documenting my process for completing the HackTheBox modules.

HackTheBox Login Brute Force - Brute Force Attacks Link to heading This is part of a multi-part series documenting my process for completing the HackTheBox modules.

Annual DR exercise for a customer with strict compliance requirements (SOC 2).

Consider an 8-bit system.

Two’s Complement is required for representing signed integers.

Capturing Live Network Traffic from a Kubernetes Pod Link to heading Occasionally, you need to troubleshoot network behavior inside a Kubernetes pod — maybe you’re chasing a DNS issue, testing service connectivity, or inspecting strange application traffi…

Directory services infrastructure was running on an Azure VM SKU that was being phased out.

Legacy ASP.NET Framework API service running in IIS on Windows VMs.

Infrastructure that grows organically ends up scattered across multiple subscriptions - made sense when each part went in, but creates operational debt over time.

Modifying Machine Code in Executables Link to heading In this post, we’ll walk through a simple but fun reverse-engineering exercise: taking a compiled C program, locating the machine instructions responsible for printing characters, and modifying those b…

Introduction Link to heading If you have ever initialized a new Go project with go mod init main and later tried to write tests for it, you may have seen this cryptic error: cannot import "main" At first glance, this doesn’t make much sense — after all,…

The initramfs (initial RAM filesystem) is a temporary in-memory filesystem used for systems that do not know in advance certain things about their hardware at boot time.

In this article we’ll take a quick look at major/minor page faults in Linux.

Anacron is designed for tasks that need to run periodically (daily, weekly, monthly) on systems that are not continuously powered on.

The process control block in Linux (formally named the task_struct) is a data structure maintained by the kernel that contains all of the necessary information to maintain a process on the system.

Running a Kubernetes cluster means managing a whole ecosystem of supporting services - ingress controller, cert automation, cost visibility tooling, authentication proxy, metrics stack, autoscaling add-ons.

We were using Fluent Bit to ship ingress logs out of Kubernetes.

Azure is deprecating Basic SKU Public IPs, so we needed to upgrade everything to Standard SKU.

Let people spin up lab environments on-demand, self-service, instead of having to ask an infra team and wait around.

Build a ring-based release process so the release team could run deployments without needing engineering to babysit every release.

Kubernetes 1.31 upgrade.

Nginx upgrade across the board - one of those quiet maintenance projects that keeps you off end-of-life versions and away from CVEs.

Not every project fits into a neat story.

Regulated customers (financial services, etc.) need documented proof that disaster recovery actually works, not just exists on paper.

Building an MVP for a content personalization capability - not pure infrastructure, but proving the concept works before building the full thing.

Introduction Link to heading This post covers a simple and efficient solution for implementing liveness probes in pods running console applications (think background services or utility DaemonSets).

SLAs don’t mean much if you can’t actually measure and report on them.

You can have all the alerts configured you want, but if the team doesn’t agree on what they mean, who’s responsible for them, and what a good response looks like, they’re just noise.

Every year: renew the TLS certificates before they expire.

DR plans usually exist in people’s heads until you actually need one - at which point tribal knowledge doesn’t cut it.

Introduction Link to heading Combining multiple Kubernetes secrets into a single directory can streamline secret management in your applications.

Introduction Link to heading Knowing the type of a file you’re working with is not just a matter of curiosity — it’s often a necessity.

Infrastructure evolves fast, and monitoring coverage always lags behind.

Every Kubernetes minor version bump is a small adventure in finding deprecated APIs lurking in your manifests, Helm charts, and third-party controllers.

Introduction Link to heading In this post, we’ll take a quick look at URL validation using Golang.

This will be a short post about a recent issue I encountered when using Nginx as a Kubernetes ingress.

Release environments get less monitoring love than production, which is backwards - instability there slows down every team trying to validate their work.