Cybersecurity & app development blog
Practical guides to DNS and email security, Microsoft Azure, AI infrastructure and secure app development. Written by Yogesh in Glen Waverley, Melbourne, with hands-on labs and examples.
Building an isolated PHP CVE honeypot: from internet scan to PCAP
Exposing unpatched PHP 8.3.35 for CVE-2026-109618, capturing live Nmap reconnaissance with tcpdump, and streaming threat intel into Microsoft Sentinel.
From HTTP 503 to rate limits and CAPTCHA
A complete classroom lab: REST API, bounded load tests, throttling, browser fingerprints, CAPTCHA and Log Analytics. Includes full code, screenshots and cleanup.
Can you self-host Kimi K2.5 on $5,000 of Azure credit?
Which Kimi model fits which Azure GPU, what the credit really buys, and a secure, cost-capped deployment you can use from your phone.
DMARC explained, with a real domain
SPF, DKIM and DMARC in plain English, plus a hands-on lab: send as blah@globalsoc.com.au and watch DMARC pass.
What your DNS exposes: email, web and attack surface
How to read your own email, website and subdomain records, what should be public, and what to clean up.
How to read your DNS Audit report
What the grade, the severity labels and each section mean, the findings people ask about most, and what to do next.
What your DNS reveals about the software you use
SPF includes, DKIM selectors and verification records list the tools connected to your domain. How to read them and tidy up.
Tracking when public IPs change
An IP is a lease, not an identity. Why blocklists and allowlists rot, and how to build a change-tracker — with a hands-on lab.
Reverse shells and ssh -R: how one click becomes remote access
Why firewalls don't stop reverse shells and reverse RDP, how fake CAPTCHA sites trick people, and the checklist that stops it.