[{"content":"By Sanidhya Soni | September 10, 2026\nThis is Part 1 of the series \u0026amp;ldquo;How to Design Red Team Infrastructure.\u0026amp;rdquo;\nBefore getting into technical terms, it is worth being clear on what red team infrastructure actually is and what we are trying to achieve when we design it.\nIf the infrastructure is poorly designed, a single blocked domain, exposed server, failed service, or configuration mistake can disrupt a large part of the engagement.\nThe goal is simpler: build an environment that gives …","date":"2026-09-10","permalink":"/posts/red-team/red-team-infrastructure-architecture-and-design/","summary":"By Sanidhya Soni | September 10, 2026\nThis is Part 1 of the series \u0026ldquo;How to Design Red Team Infrastructure.\u0026rdquo;\nBefore getting into technical terms, it is worth being clear on what red team …","tags":["red team","red team infrastructure","c2 infrastructure","opsec"],"title":"Red Team Infrastructure: Architecture \u0026 Design"},{"content":"By Sanidhya Soni | September 05, 2026\nHardening a machine is mostly subtraction. You switch off what you\u0026amp;rsquo;re not using or don\u0026amp;rsquo;t need, reducing the attack surface for an adversary.\nThis guide covers both Linux and Windows.\nOne thing up front: none of this makes you \u0026amp;ldquo;compliant\u0026amp;rdquo; with anything by itself. If you need that, measure against a real baseline — the CIS Benchmarks or a DISA STIG — instead of a checklist some blog threw together. This one included.\nWhat hardening …","date":"2026-09-05","permalink":"/posts/guides/os-hardening-linux-windows/","summary":"By Sanidhya Soni | September 05, 2026\nHardening a machine is mostly subtraction. You switch off what you\u0026rsquo;re not using or don\u0026rsquo;t need, reducing the attack surface for an adversary.\nThis …","tags":["hardening","linux","windows","defensive","sysadmin","blue-team"],"title":"A Practical Guide to OS Hardening on Linux and Windows"},{"content":"By Sanidhya Soni | February 01, 2026\nAffected: FPDF ≤ 1.86\nVector: Remote code execution\nSeverity: High\nExploit prerequisites: The target application must allow an attacker to influence the file path passed to AddFont() (commonly via “custom font upload” features)\nSummary FPDF font definition files are PHP and are loaded using include(). If an application allows untrusted uploads to become font definition files, or allows attacker control of the path passed into AddFont(), the attacker can …","date":"2026-02-01","permalink":"/posts/security-research/cve-2025-65875-fpdf-rce-vulnerability/","summary":"By Sanidhya Soni | February 01, 2026\nAffected: FPDF ≤ 1.86\nVector: Remote code execution\nSeverity: High\nExploit prerequisites: The target application must allow an attacker to influence the file path …","tags":["cve","security-research","php","rce"],"title":"CVE-2025-65875: Untrusted Font Upload / Path Injection Can Lead to PHP Execution When Using FPDF"}]