Farros logo

Writing

Notes on security, data, and building for the long term.

A mix of long-form essays published here, and shorter field notes from blog.farrosfr.com.

Long-form

Essays

Archive

Field notes from blog.farrosfr.com

Open blog archive ↗
Topic
Year

Showing all 186 articles

Web & Systems
Oct 15, 2026

AOC 25 Days 14-18: Docker, Web DFIR, & Registry Hives

Escape Docker containers via UNIX sockets, triage Apache web attacks in Splunk, parse Windows registry hives, solve CyberChef locks, and deobfuscate C2 scripts.

blog.farrosfr.com 2026
Cybersecurity
Oct 9, 2026

AOC 25 Days 9-13: Hashcat, Sentinel, XSS, & YARA

Crack encrypted PDF/ZIP archives, triage Linux privilege escalation in Microsoft Sentinel, exploit reflected/stored XSS, inspect phishing, and run YARA rules.

blog.farrosfr.com 2026
AI & Systems
Oct 7, 2026

AOC 25 Days 4-8: AI, IDOR, Malware Sandbox, & Nmap

blog.farrosfr.com 2026
Cybersecurity
Sep 24, 2026

Junior PenTester: Web Recon and Server Exploitation Guide

Manual browser inspection, OSINT and Gobuster discovery, Linux server hardening flaws, modern web stack CVEs, and IIS WebDAV shell execution.

blog.farrosfr.com 2026
Cybersecurity
Sep 21, 2026

Junior PenTester: Complete Nmap Network Scanning Guide

Complete 4-in-1 guide to Nmap: Live host discovery, basic and advanced port scans, OS fingerprinting, and the Nmap Scripting Engine (NSE).

blog.farrosfr.com 2026
Web & Systems
Sep 20, 2026

Fix Firefox Dev Edition Sign-Out Loop on Shutdown

Quick fix for Firefox Developer Edition constantly logging out and disabling Sync after every browser shutdown.

blog.farrosfr.com 2026
Cybersecurity
Aug 29, 2026

Junior PenTester: Network Recon & Protocol Exploitation

Complete 4-in-1 guide to Jr PenTester network fundamentals: Passive OSINT, Active Probing, Cleartext State Machines, and Network Sniffing & TLS.

blog.farrosfr.com 2026
Cybersecurity
Aug 15, 2026

Report Writing for SOC L2 | study notes

Complete study notes for Report Writing for SOC L2. Master executive summaries, DFIR handover notes, and client incident reporting.

blog.farrosfr.com 2026
Cybersecurity
Aug 15, 2026

SOC L2 Alert Triage | study notes

Complete study notes for the SOC L2 Alert Triage room. Learn advanced SOC level 2 incident investigation and alert analysis.

blog.farrosfr.com 2026
Field Notes
Aug 9, 2026

Man vs. Himself | Chapter 1

Do your best today, do better tomorrow

blog.farrosfr.com 2026
Cybersecurity
Aug 5, 2026

Complimentary | study notes

Complete study notes for the Complimentary room. Uncover AWS Cognito IAM misconfigurations and extract guest records from DynamoDB.

blog.farrosfr.com 2026
Data
Aug 5, 2026

Packed Light | study notes

Complete study notes for Packed Light room. Analyze network PCAPs, decode covert HTTP traffic, and reassemble exfiltrated data.

blog.farrosfr.com 2026
Cybersecurity
Jul 30, 2026

Room 404 | study notes

study notes for Room 404 room. Discover an exposed .git directory via web enumeration, dump the repository, and extract the hidden flag.

blog.farrosfr.com 2026
AI & Systems
Jul 30, 2026

The Concierge Knows Too Much | study notes

study notes for The Concierge Knows Too Much room. Bypass VERA's AI prompt guardrails using persona impersonation to extract the escalation flag.

blog.farrosfr.com 2026
Cybersecurity
Jul 27, 2026

Intro to Cloud Security | study notes

blog.farrosfr.com 2026
Cybersecurity
Jul 27, 2026

OWASP API Security Top 10 - 1 | study notes

blog.farrosfr.com 2026
Cybersecurity
Jul 21, 2026

Virtualization and Containers | study notes

study notes for Virtualization and Containers room. Learn bare-metal and hosted hypervisors, Docker containers, and Kubernetes orchestration.

blog.farrosfr.com 2026
Cybersecurity
Jul 21, 2026

Network Security Protocols | study notes

Complete study notes for Network Security Protocols room. Learn about secure network protocols at the different layers of the OSI model.

blog.farrosfr.com 2026
Cybersecurity
Jul 19, 2026

Network Device Hardening | study notes

A complete study notes for the Network Device Hardening room, showing how to secure VPNs, routers, switches, firewalls, and logging.

blog.farrosfr.com 2026
Cybersecurity
Jul 18, 2026

Active Directory Hardening | study notes

A complete study notes and study notes for the Active Directory Hardening room, focusing on securing AD environments and domain controllers.

blog.farrosfr.com 2026
Cybersecurity
Jul 17, 2026

How I Contributed to Astro Core: Fixing Cryptic Zod CSP Errors

How I improved Content Security Policy validation in Astro by refactoring Zod schemas and custom error mapping.

blog.farrosfr.com 2026
AI & Systems
Jul 17, 2026

Stop Letting AI Guess Your Requirements: The Grill-Me Paradigm

Why Socratic interrogations through the Grill-Me skill are essential to align developer plans, prevent agent assumptions, and write better code.

blog.farrosfr.com 2026
Field Notes
Jul 17, 2026

Boredom by Design: Why Staring at a Wall Requires a Clean Mind

My experience with the 10-minute wall-staring method, and why mental visual clarity and self-control are essential to unlocking deep, productive focus.

blog.farrosfr.com 2026
Web & Systems
Jul 16, 2026

Strava API Changes: The Death of the Free Developer Tier

My experience integrating the Strava API in my Threads Watermark app, and how Strava's 2026 subscription mandate broke free-tier API access.

blog.farrosfr.com 2026
Web & Systems
Jul 16, 2026

How I Added Affixed Capture Support to Axum's Typed Paths

How I contributed to tokio-rs/axum to support prefixed and suffixed typed path captures like /@{username} and /files/{name}.json.

blog.farrosfr.com 2026
Cybersecurity
Jul 9, 2026

Microsoft Windows Hardening | study notes

Complete study notes for the Microsoft Windows Hardening room. Learn how to secure and harden Windows 10 OS configurations.

blog.farrosfr.com 2026
Data
Jul 6, 2026

Building a Full-Stack App on Cloudflare's Free Tier with Astro SSR

A practical guide to building and deploying a full-stack web app using Cloudflare Workers, D1 database, KV storage, and Astro SSR. Completely free.

blog.farrosfr.com 2026
Cybersecurity
Jul 5, 2026

Linux System Hardening | study notes

Complete study notes for Linux System Hardening room. Learn how to improve the security posture of your Linux systems.

blog.farrosfr.com 2026
Cybersecurity
Jul 2, 2026

Solar PV Monitoring Networks: Troubleshooting Routing and Subnets

A comprehensive guide on network architecture, troubleshooting subnets, routing gateways, and DNS settings for industrial solar PV loggers.

blog.farrosfr.com 2026
Cybersecurity
Jul 1, 2026

Become a Defender | study notes

Complete study notes for Become a Defender room. Explore defensive security, cyber infrastructure, and how to protect systems from attacks.

blog.farrosfr.com 2026
Cybersecurity
Jul 1, 2026

Cryptography Concepts | study notes

Complete study notes for Cryptography Concepts room. This room provides an understanding of cryptography in our everyday digital encounters.

blog.farrosfr.com 2026
Cybersecurity
Jun 30, 2026

JavaScript: Simple Demo | study notes

Complete study notes for JavaScript: Simple Demo room. Explore what a basic JavaScript program looks like.

blog.farrosfr.com 2026
Cybersecurity
Jun 30, 2026

The CIA Triad | study notes

Complete study notes for The CIA Triad room. Understand the CIA Triad and how it shapes cyber security mindset.

blog.farrosfr.com 2026
Cybersecurity
Jun 29, 2026

Python: Simple Demo | study notes

Complete study notes for Python: Simple Demo room. Explore what a basic Python program looks like.

blog.farrosfr.com 2026
Cybersecurity
Jun 27, 2026

Windows CLI Basics | study notes

Complete study notes for Windows CLI Basics room. Explore what Windows CLI is, how to navigate, and interact with the system using Windows CLI.

blog.farrosfr.com 2026
Data
Jun 27, 2026

Data Encoding | study notes

Complete study notes for Data Encoding room. Learn how computer encodes characters, from ASCII to Unicode's UTF.

blog.farrosfr.com 2026
Cybersecurity
Jun 27, 2026

Secure Network Architecture | study notes

Complete study notes for Secure Network Architecture room. Learn about and implement security best practices for network environments.

blog.farrosfr.com 2026
Web & Systems
Jun 26, 2026

Building Custom ERP Superapps with Rust

An architectural look at building type-safe, high-performance custom ERP systems and superapps in Rust, and how they compare with Odoo and SAP.

blog.farrosfr.com 2026
AI & Systems
Jun 26, 2026

Automating Meeting Minutes with Whisper and Python

A guide to setting up a local AI transcription pipeline and converting raw audio into structured Minutes of Meeting (MoM) documents.

blog.farrosfr.com 2026
Cybersecurity
Jun 26, 2026

Cloud Computing Fundamentals | study notes

study notes for the Cloud Computing Fundamentals room. Learn how cloud computing allows businesses to build, scale, and manage infrastructure.

blog.farrosfr.com 2026
Cybersecurity
Jun 25, 2026

Virtualisation Basics | study notes

study notes for the Virtualisation Basics room. Learn how virtualisation powers modern IT, improves efficiency, and isolates environments.

blog.farrosfr.com 2026
Cybersecurity
Jun 24, 2026

Penetration Testing Frameworks | study notes

Complete study notes for Penetration Testing Frameworks room. Explore the landscape of penetration testing frameworks.

blog.farrosfr.com 2026
Cybersecurity
Jun 24, 2026

Cyber Kill Chain | study notes

study notes for the Cyber Kill Chain room. Learn the seven stages of Lockheed Martin's framework for defending against cyber attacks.

blog.farrosfr.com 2026
Cybersecurity
Jun 23, 2026

CVE-2026-42945: Nginx Rift | study notes

study notes for CVE-2026-42945: Nginx Rift room. Exploit the NGINX rewrite module heap overflow RCE vulnerability.

blog.farrosfr.com 2026
AI & Systems
Jun 23, 2026

UnIndexed | study notes

Complete study notes for UnIndexed room. An AI assistant was given access to everything. Nobody checked what everything included.

blog.farrosfr.com 2026
AI & Systems
Jun 23, 2026

Lockdown | study notes

Complete study notes for Lockdown room. Secure the Bastion AI assistant by auditing and remediating configuration vulnerabilities.

blog.farrosfr.com 2026
Data
Jun 22, 2026

Sensitive Information Disclosure | study notes

study notes for Sensitive Information Disclosure room. Learn how embeddings and weak access controls leak private data.

blog.farrosfr.com 2026
AI & Systems
Jun 22, 2026

Data Poisoning in RAG Systems | study notes

study notes for Data Poisoning in RAG Systems room. Learn how data poisoning alters AI embeddings and retrieval results.

blog.farrosfr.com 2026
Cybersecurity
Jun 21, 2026

RAG Security Fundamentals | study notes

study notes for RAG Security Fundamentals room. Learn how RAG works and how attackers exploit retrieval and trust boundaries.

blog.farrosfr.com 2026
AI & Systems
Jun 20, 2026

Securing AI Agents in CI/CD

How AI agents in development pipelines can be subverted via indirect prompt injection, and how to defend using runtime sandboxes and least-privilege APIs.

blog.farrosfr.com 2026
AI & Systems
Jun 20, 2026

Checkpoint | study notes

Complete study notes and security audit analysis for the Checkpoint room. Investigating AI code review models for supply chain risks.

blog.farrosfr.com 2026
AI & Systems
Jun 18, 2026

Install Playwright Globally for AI Agents

A practical guide to configuring Playwright and CloakBrowser globally. Essential setup for AI coding agents to perform browser automation instantly.

blog.farrosfr.com 2026
AI & Systems
Jun 18, 2026

Comparing AI Agent Skills: Why I Prefer Caveman Over Ponytail Mode

A comparison of the Ponytail and Caveman custom skills for AI coding agents, and why Caveman mode wins for developer productivity.

blog.farrosfr.com 2026
Data
Jun 18, 2026

VPS Auto-Deploy: CI/CD for Astro SSR and Rust

A step-by-step guide on configuring an automated git-driven CI/CD deployment pipeline on a VPS for Astro SSR and a Rust backend.

blog.farrosfr.com 2026
Web & Systems
Jun 18, 2026

Dual-Path Rust Deployments: Git vs Direct Hotfix

A detailed guide comparing Git-based automation and manual direct binary hotfixes for deploying Rust web applications on a self-hosted server.

blog.farrosfr.com 2026
AI & Systems
Jun 17, 2026

Detecting Malicious ML Models: Pickle Bytecode Analysis

Learn how Python's pickle deserialization works under the hood and build a custom bytecode scanner to detect malicious machine learning models.

blog.farrosfr.com 2026
Cybersecurity
Jun 17, 2026

Payload | study notes

Complete study notes for the Payload room. Learn to analyze malicious model payloads, trace logs, and perform incident response.

blog.farrosfr.com 2026
AI & Systems
Jun 16, 2026

Securing the AI Supply Chain | study notes

study notes for Securing the AI Supply Chain room. Build SupplySecLab and learn to inspect models, audit dependencies, and govern LLM supply chains.

blog.farrosfr.com 2026
Cybersecurity
Jun 16, 2026

Supply Chain Attack Vectors | study notes

Complete study notes for Supply Chain Attack Vectors room. Learn how trusted ML components can be turned into attack vectors.

blog.farrosfr.com 2026
AI & Systems
Jun 15, 2026

Safe Secrets Management | Developer & AI Guide

A practical guide to secure secrets management on Windows and Linux, featuring env variables, strict file permissions, and safety tips for AI vibe coding.

blog.farrosfr.com 2026
Field Notes
Jun 15, 2026

MSI Modern 14 C5M Dual Monitors

A practical guide to connecting two external monitors to the MSI Modern 14 C5M laptop using active DisplayLink adapters and custom cable layouts.

blog.farrosfr.com 2026
AI & Systems
Jun 14, 2026

Understanding AI Supply Chains

A security guide to AI supply chain vulnerabilities, covering pickle deserialization risks, SafeTensors conversion, and upstream dependency protection.

blog.farrosfr.com 2026
AI & Systems
Jun 14, 2026

LLM Prompt Defence

A guide to LLM prompt injection and jailbreak defenses, covering system prompt hardening, Llama Prompt Guard, and OWASP output sanitization.

blog.farrosfr.com 2026
AI & Systems
Jun 13, 2026

LLM Jailbreaking Study Notes

An analysis of AI jailbreaking mechanics, the 'Alignment Tax' of RLHF, and the shift from single-turn overrides to strategic multi-turn conditioning.

blog.farrosfr.com 2026
AI & Systems
Jun 12, 2026

LLM Prompt Injection Explained

An analysis of direct and indirect prompt injection, real-world bot hijacks, and the technical breakdown of how token streams are exploited.

blog.farrosfr.com 2026
AI & Systems
Jun 12, 2026

AI Threat Modelling Framework

An analysis of AI architectural threats—Prompt Injection, Data Poisoning, and Information Disclosure—and how to build defensive trust boundaries.

blog.farrosfr.com 2026
Field Notes
Jun 11, 2026

OpenCode Through 9Router on Windows and VPS

A combined field guide for running OpenCode through 9Router locally on Windows and privately on a VPS with PM2, SSH tunneling, and exact model IDs.

blog.farrosfr.com 2026
AI & Systems
Jun 10, 2026

AI System Reconnaissance: Mapping the MLOps Attack Surface

A concise defensive guide to the AI and MLOps metadata that matters most during reconnaissance.

blog.farrosfr.com 2026
AI & Systems
Jun 7, 2026

LLM Security: Data Leaks, Prompts, and Context Risk

How LLMs leak data through memorization, prompt injection, and context overflow, with practical controls for safer AI apps.

blog.farrosfr.com 2026
AI & Systems
Jun 7, 2026

AI Threat Modelling with MITRE ATLAS and OWASP

A practical workflow for modelling AI security threats using MITRE ATLAS, ATT&CK, OWASP Top 10, and OWASP AI Exchange.

blog.farrosfr.com 2026
AI & Systems
Jun 3, 2026

Securing AI Systems | study notes

Complete study notes for Securing AI Systems room. Map AI architecture, identify OWASP/ATLAS attack surfaces, and apply secure design to trust boundaries.

blog.farrosfr.com 2026
Cybersecurity
Jun 3, 2026

Dive Into Pentesting | study notes

Complete study notes for Dive Into Pentesting room. Learn the basics of penetration testing, from methodology to responsible practice.

blog.farrosfr.com 2026
Cybersecurity
Jun 1, 2026

Guided Pentest: Infrastructure | study notes

Complete study notes for Guided Pentest: Infrastructure room. Understand the steps involved in a real-life pentest and follow them to compromise your target.

blog.farrosfr.com 2026
Cybersecurity
May 31, 2026

Guided Pentest: Web | study notes

Wakthrough for Guided Pentest: Web room. Learn web app pentesting by chaining vulnerabilities from recon to full server compromise.

blog.farrosfr.com 2026
AI & Systems
May 30, 2026

ContAInment | study notes

Complete study notes for ContAInment room. Can you help contain the ransomware threat with the help of AI?

blog.farrosfr.com 2026
Field Notes
May 24, 2026

When Work Has Value Beyond Salary

A personal reflection about my first job after graduation, finance-sector IT work, and the moment I started asking what value my work was creating for society.

blog.farrosfr.com 2026
AI & Systems
May 23, 2026

The Agent Era Changes How We Talk To AI

AI used to be mostly a brainstorming partner. Agentic AI is different because it can touch files, APIs, emails, chats, and even payment systems.

blog.farrosfr.com 2026
AI & Systems
May 10, 2026

AI Forensics | study notes

Complete study notes for AI Forensics room. Explore AI DFIR and learn how it boosts your investigation capabilities.

blog.farrosfr.com 2026
AI & Systems
May 9, 2026

Prompt Engineering | study notes

Complete study notes for Prompt Engineering room. Learn how LLMs process text and craft effective prompts for security and adversarial testing.

blog.farrosfr.com 2026
AI & Systems
May 8, 2026

AI Models & Data | study notes

Complete study notes for AI Models & Data room. Explore how data is fundamental to AI security, and the models which power it.

blog.farrosfr.com 2026
Web & Systems
May 6, 2026

Fixing SSL Renewal 404 Error in aaPanel with Astro

How to troubleshoot and fix Let's Encrypt ACME challenge 404 errors when running an Astro app through a reverse proxy in aaPanel.

blog.farrosfr.com 2026
AI & Systems
May 3, 2026

AI/ML Security Threats | study notes

Complete study notes for AI/ML Security Threats room. Learn AI basics, key terms, and how it's used by both attackers and defenders.

blog.farrosfr.com 2026
Web & Systems
May 3, 2026

WordPress to Astro 6: A 2-Year Journey in Cyber & Web

Exploring my journey into cybersecurity and web development, focusing on Astro 6 and the technical limits of free-tier hosting in 2026.

blog.farrosfr.com 2026
Web & Systems
Apr 20, 2026

Astro SEO: Fixing Trailing Slash Issues on Cloudflare

Learn how a mismatched trailing slash configuration between Astro and Cloudflare Pages caused a 70% drop in indexed pages and how I fixed the redirect loop.

blog.farrosfr.com 2026
Cybersecurity
Apr 17, 2026

Un-bypassable Windows Hardening for Content Filtering

A multi-layered defense-in-depth guide to locking down Windows using Registry policies, DNS over HTTPS, and privilege management to block adult content.

blog.farrosfr.com 2026
Web & Systems
Apr 14, 2026

Calculating Global Import Costs for Industrial Products

B2B guide to landed costs. Learn why $0.08 web prices are 'teaser traps' and how to calculate real-world import fees for 50MWp solar projects in Indonesia.

blog.farrosfr.com 2026
Field Notes
Apr 12, 2026

Why Your WWW Domain Shows Error 522 And How to Fix It

Getting an Error 522 Connection Timed Out on your www domain in Cloudflare Pages? Learn why this happens and how to fix it in under two minutes.

blog.farrosfr.com 2026
Cybersecurity
Apr 12, 2026

Phishing Basics | study notes

Complete study notes for room. Explore phishing techniques and tools for penetration testing.

blog.farrosfr.com 2026
Web & Systems
Apr 10, 2026

How to Install n8n via Docker and Fix the 503 Error

A step-by-step guide to self-hosting n8n using Docker Compose, including how to troubleshoot and fix common folder permission crashing errors.

blog.farrosfr.com 2026
Cybersecurity
Apr 9, 2026

Burp Suite: Repeater | study notes

Complete study notes for Burp Suite: Repeater room. Learn how to use Repeater to duplicate requests in Burp Suite.

blog.farrosfr.com 2026
Cybersecurity
Apr 3, 2026

Race Conditions | study notes

Complete walktrough for Race Conditions room. Learn about race conditions and how they affect web application security.

blog.farrosfr.com 2026
Cybersecurity
Apr 3, 2026

Command Injection | study notes

study notes for Command Injection room. Learn about a vulnerability allowing you to execute commands through a vulnerable app, and its remediations.

blog.farrosfr.com 2026
Cybersecurity
Apr 3, 2026

Become a Hacker | study notes

Complete walktrough for Become a Hacker room. Explore offensive security, the hacker mindset, and hack a web app to improve security

blog.farrosfr.com 2026
Data
Apr 1, 2026

Database SQL Basics | study notes

Complete study notes for Database SQL Basics room. Learn the basics of databases and SQL by writing simple queries to retrieve and manage data.

blog.farrosfr.com 2026
Data
Mar 31, 2026

Data Representation | study notes

Complete study notes for Data Representation room. Learn about how computers represent numbers and colors.

blog.farrosfr.com 2026
Cybersecurity
Mar 31, 2026

Client-Server Basics | study notes

Complete study notes for Client-Server Basics room. This room teaches the basics of the Client-Server model.

blog.farrosfr.com 2026
Field Notes
Mar 29, 2026

The Phantom Edge: A Cloudflare Pastejacking Attack

My static site served a fake reCAPTCHA. Here is a forensic breakdown of a Cloudflare Worker pastejacking attack and how I stopped it.

blog.farrosfr.com 2026
Cybersecurity
Mar 28, 2026

Linux CLI Basics | study notes

Complete study notes for Linux CLI Basics room. Get comfortable navigating through the Linux CLI.

blog.farrosfr.com 2026
Cybersecurity
Mar 27, 2026

Windows Basics | study notes

Complete study notes for Windows Basics room. Learn to navigate Windows, manage files, and use essential system tools.

blog.farrosfr.com 2026
Cybersecurity
Mar 26, 2026

Operating Systems: Introduction | study notes

Complete study notes for Operating Systems: Introduction room. Explore the basics of operating systems and the core features that power your computer.

blog.farrosfr.com 2026
Cybersecurity
Mar 21, 2026

Computer Types | study notes

Complete study notes for Computer Types room. Explore the different types of computers, from laptops to the tiny chips inside your coffee machine.

blog.farrosfr.com 2026
Cybersecurity
Mar 20, 2026

Offensive Security Intro | study notes

Complete study notes for Offensive Security Intro room. Hack your first website (legally in a safe environment) & experience an ethical hacker's job.

blog.farrosfr.com 2026
Cybersecurity
Mar 20, 2026

Inside a Computer System | study notes

Complete study notes for Inside a Computer System room. This room covers the basic components of a computer system.

blog.farrosfr.com 2026
Cybersecurity
Mar 18, 2026

Intro to Cross-site Scripting | study notes

study notes for Intro to Cross-site Scripting room. Learn how to detect & exploit XSS vulnerabilities, giving you control of other visitor's browsers

blog.farrosfr.com 2026
Cybersecurity
Mar 16, 2026

OWASP Top 10 2025: IAAA Failures | study notes

study notes for OWASP Top 10 2025: IAAA Failures room. Learn about A01, A07, and A09 in how they related to failures in the applied IAAA model

blog.farrosfr.com 2026
Cybersecurity
Mar 16, 2026

Intro to SSRF | study notes

Complete study notes for Intro to SSRF room. Learn how to exploit SSRF vulnerabilities, allowing you to access internal server resources.

blog.farrosfr.com 2026
Field Notes
Mar 6, 2026

RustScan Has Trade-Offs And Works Best With Nmap

RustScan is incredibly fast but noisy and lacks deep analysis. Discover why pairing its speed with Nmap's thoroughness is the best scanning strategy.

blog.farrosfr.com 2026
Field Notes
Mar 2, 2026

Running a Custom Laravel Project Locally

A comprehensive guide on setting up a Laravel project locally, covering environment configuration, troubleshooting Redis errors, and Vite integration.

blog.farrosfr.com 2026
Data
Feb 28, 2026

IDOR | study notes

study notes for IDOR room. Learn how to find and exploit IDOR vulnerabilities in a web application giving you access to data that you shouldn't have.

blog.farrosfr.com 2026
Cybersecurity
Feb 28, 2026

Authentication Bypass | study notes

study notes for Authentication Bypass room. Learn how to defeat logins and other authentication mechanisms to allow you access to unpermitted areas.

blog.farrosfr.com 2026
Cybersecurity
Feb 24, 2026

Subdomain Enumeration | study notes

Complete study notes for Subdomain Enumeration room. Learn the various ways of discovering subdomains to expand your attack surface of a target.

blog.farrosfr.com 2026
Cybersecurity
Feb 22, 2026

Walking An Application | study notes

Hands-on study notes of Walking An Application on , exploring source code, Inspector, Debugger, and Network tools to uncover hidden flags.

blog.farrosfr.com 2026
Web & Systems
Feb 22, 2026

Fixing WSL Ubuntu Setup & Hostname Issues

Step-by-step guide to install Ubuntu on WSL, fix hostname errors, and an honest comparison between WSL and Kali in VirtualBox.

blog.farrosfr.com 2026
Cybersecurity
Feb 22, 2026

Content Discovery | study notes

study notes for “Walking An Application.” Learn how to use browser developer tools to manually discover hidden flags and potential vulnerabilities.

blog.farrosfr.com 2026
Web & Systems
Feb 20, 2026

Secure Astro 5 Contact Forms with Resend and Upstash

Build a production-ready contact form in Astro 5. Learn to integrate Resend for emails and Upstash Redis for rate limiting to block spam effectively.

blog.farrosfr.com 2026
Data
Feb 19, 2026

OWASP Top 10 2025: Insecure Data Handling

Step-by-step study notes for : OWASP Top 10 2025. Explore Insecure Data Handling, covering A04, A05, and A08 with SSTI and Deserialization exploit study notes.

blog.farrosfr.com 2026
Data
Feb 19, 2026

Designing a MySQL Database for B2B Energy Products

Design a basic product data for B2B electrical and renewable energy products with tier pricing, categories, brands, and multi-currency support.

blog.farrosfr.com 2026
Field Notes
Feb 18, 2026

Self-Control Is the First Leadership Test

Before leading others, master yourself. In a world built to hijack attention, discipline over impulse is the foundation of trust and true authority.

blog.farrosfr.com 2026
Field Notes
Feb 16, 2026

Fixing a Locked Laptop Without Reinstalling

Helping my manager recover a locked Windows laptop—balancing convenience, licensing, and avoiding the old USB reinstall route.

blog.farrosfr.com 2026
Cybersecurity
Feb 15, 2026

OWASP Top 10 2025: Design Flaws

Learn about A02, A03, A06, and A10 and how they related to design flaws in the application.

blog.farrosfr.com 2026
Web & Systems
Feb 13, 2026

Pro Google Analytics in Astro with Partytown

A practical integrating Google Analytics in Astro with Partytown. This guide covers performance considerations, View Transitions, and deployment tips.

blog.farrosfr.com 2026
Field Notes
Feb 12, 2026

Debugging Push SDK on Office WiFi Networks

A real-world case study of deploying a face recognition attendance device and diagnosing WiFi firewall issues blocking cloud Push SDK

blog.farrosfr.com 2026
Field Notes
Feb 11, 2026

Installing Gemini CLI on VPS the Right Way

Step-by-step guide to installing Gemini CLI on a VPS with proper PATH configuration so you can run it globally with a single command.

blog.farrosfr.com 2026
Field Notes
Feb 11, 2026

Deploying Laravel E-commerce: Lessons from the Field

Real-world lessons from deploying a Laravel e-commerce app to VPS—covering pitfalls, trade-offs, and practical decisions beyond local development.

blog.farrosfr.com 2026
Data
Feb 9, 2026

Relearning SQL Through Real-World E-Commerce Projects

Sharing my journey relearning SQL by working on real e-commerce projects using MySQL and PostgreSQL, focusing on practical business-driven queries.

blog.farrosfr.com 2026
Web & Systems
Feb 7, 2026

Exploring Medusa JS for Scalable B2B Commerce

A practical look at Medusa JS as a headless, open-source backend for scalable B2B e-commerce, including architecture, pros, and early testing notes.

blog.farrosfr.com 2026
Cybersecurity
Dec 25, 2025

n8n: CVE-2025-68613 | study notes

Explore the mechanics of CVE-2025-68613 in n8n. Learn how sandbox escapes lead to Remote Code Execution and how to detect/patch this critical CVSS 9.9 flaw.

blog.farrosfr.com 2025
Field Notes
Dec 21, 2025

Splunk | Advent of Cyber 2025 Day 3 study notes

Master Splunk basics in this AoC 2025 Day 3 study notes. Learn to trace a ransomware attack from SQLi to exfiltration using SPL and log analysis.

blog.farrosfr.com 2025
Field Notes
Dec 21, 2025

Phising | Advent of Cyber 2025 Day 2 study notes

Check out my study notes for Day 2 of Advent of Cyber 2025! Learn how to use the Social-Engineer Toolkit to simulate a phishing attack and capture credentials.

blog.farrosfr.com 2025
Web & Systems
Dec 20, 2025

Linux CLI | Advent of Cyber 2025 Day 1 study notes

Dive into my study notes for Advent of Cyber 2025 (Day 1). Learn Linux CLI basics, log analysis with grep, and hunt for King Malhare’s tracks to save McSkidy!

blog.farrosfr.com 2025
Cybersecurity
Dec 20, 2025

Advent of Cyber Prep Track | study notes

Master the Advent of Cyber 2025 Prep Track! My study notes covers all 10 challenges, from Linux CLI to malware analysis, to get you ready for the Wareville games.

blog.farrosfr.com 2025
Cybersecurity
Dec 17, 2025

Threat Modelling | study notes

Master threat modelling with this comprehensive study notes on MITRE ATT&CK, STRIDE, DREAD, and PASTA frameworks to build cyber resiliency and emulation capabilities.

blog.farrosfr.com 2025
Cybersecurity
Dec 12, 2025

Learning Astro, Offensive Security, and CI/CD

A short reflection on learning Astro, cybersecurity basics, and CI/CD workflows, and how each skill opened new perspectives in modern web development.

blog.farrosfr.com 2025
Cybersecurity
Dec 11, 2025

Governance & Regulation | study notes

blog.farrosfr.com 2025
Cybersecurity
Dec 10, 2025

React2Shell: CVE-2025-55182 | study notes

blog.farrosfr.com 2025
Cybersecurity
Oct 6, 2025

Security Principles | study notes

blog.farrosfr.com 2025
Cybersecurity
Oct 6, 2025

REMnux: Getting Started | study notes

blog.farrosfr.com 2025
Cybersecurity
Oct 6, 2025

FlareVM: Arsenal of Tools | study notes

blog.farrosfr.com 2025
Cybersecurity
Oct 6, 2025

CAPA: The Basics | study notes

blog.farrosfr.com 2025
Cybersecurity
Oct 2, 2025

Vulnerability Scanner Overview | study notes

blog.farrosfr.com 2025
Cybersecurity
Oct 2, 2025

IDS Fundamentals | study notes

blog.farrosfr.com 2025
Cybersecurity
Oct 2, 2025

Firewall Fundamentals | study notes

blog.farrosfr.com 2025
Cybersecurity
Oct 2, 2025

CyberChef: The Basics | study notes

blog.farrosfr.com 2025
Cybersecurity
Sep 27, 2025

Logs Fundamentals | study notes

blog.farrosfr.com 2025
Cybersecurity
Sep 27, 2025

Introduction to SIEM | study notes

blog.farrosfr.com 2025
Cybersecurity
Sep 27, 2025

Incident Response Fundamentals | study notes

blog.farrosfr.com 2025
Cybersecurity
Sep 24, 2025

SOC Fundamentals | study notes

blog.farrosfr.com 2025
Cybersecurity
Sep 24, 2025

Digital Forensics Fundamentals | study notes

blog.farrosfr.com 2025
Cybersecurity
Sep 15, 2025

Shells Overview | study notes

blog.farrosfr.com 2025
Cybersecurity
Sep 14, 2025

Common Attacks | study notes

blog.farrosfr.com 2025
Cybersecurity
Sep 13, 2025

Security Awareness | study notes

blog.farrosfr.com 2025
Data
Sep 11, 2025

Hacker101 CTF | A Little Something to Get You Started

Learn how a simple CTF challenge reveals real-world risks like Information Disclosure. Discover how hidden assets can expose API keys and sensitive internal data.

blog.farrosfr.com 2025
Web & Systems
Aug 25, 2025

Add an Advanced Preloader to WordPress

Learn how to add a dynamic WordPress preloader with a CSS spinner, custom logo, and 0-100% counter. Improve UX with this easy step-by-step manual guide.

blog.farrosfr.com 2025
Web & Systems
Aug 18, 2025

Add Google Analytics to Astro: The Complete Guide

blog.farrosfr.com 2025
Web & Systems
Aug 17, 2025

When Astro's SSG Hits a Scalability Wall

Exploring the transition from Astro's static generation to the scalability of SSR and Headless CMS for dynamic content management. Simple, fast, and future-proof.

blog.farrosfr.com 2025
Field Notes
Aug 12, 2025

Strapi VPS Installation with aaPanel

Learn how to install Strapi on a VPS using aaPanel. This guide covers MySQL setup, Git author configuration, and fixing Apache 404/403 errors with a reverse proxy.

blog.farrosfr.com 2025
Field Notes
Aug 11, 2025

Build a Pro Docs Site Fast with MkDocs

Simplify project documentation with MkDocs! Learn how to turn Markdown files into a fast, modern website using the Material theme in just minutes. Read more here.

blog.farrosfr.com 2025
Cybersecurity
Aug 9, 2025

Building a Website with Jamstack

Learn how Jamstack enhances web security and speed. Discover how JavaScript, APIs, and Markup create scalable, high-performance sites with a modern Git workflow.

blog.farrosfr.com 2025
Web & Systems
Aug 3, 2025

Build a Gradebook App with JavaScript

Learn to build a simple Gradebook App with JavaScript! This project covers DOM interaction, array methods, and logic to calculate grades and class averages.

blog.farrosfr.com 2025
Web & Systems
Aug 1, 2025

A Quick Guide to a Multi-Language Astro Site

blog.farrosfr.com 2025
Cybersecurity
May 30, 2025

Memory Analysis Introduction | study notes

blog.farrosfr.com 2025
Cybersecurity
May 27, 2025

DFIR: An Introduction | study notes

blog.farrosfr.com 2025
Cybersecurity
May 20, 2025

Writing Pentest Reports | study notes

blog.farrosfr.com 2025
Cybersecurity
May 16, 2025

Jr Security Analyst Intro | study notes

blog.farrosfr.com 2025
Cybersecurity
May 8, 2025

Pentesting Fundamentals | study notes

blog.farrosfr.com 2025
Cybersecurity
May 1, 2025

Learning Cyber Security | study notes

blog.farrosfr.com 2025
Cybersecurity
Apr 30, 2025

Metasploit: Introduction | study notes

blog.farrosfr.com 2025
Field Notes
Apr 30, 2025

Simply Transform Negative Thoughts into Hundreds of Push-ups

blog.farrosfr.com 2025
Cybersecurity
Apr 29, 2025

Principles of Security | study notes

blog.farrosfr.com 2025
Web & Systems
Apr 17, 2025

Simply Add New User to Kali Linux and Grant Sudo Privileges

Learn how to add a new user in Linux via Terminal. This step-by-step guide covers creating users, setting passwords, granting sudo access, and verifying IDs.

blog.farrosfr.com 2025
Field Notes
Apr 10, 2025

My Journey in Renewable Energy as an IT Engineer

blog.farrosfr.com 2025
Field Notes
Mar 28, 2025

Easily Reveal Your Wi-Fi Password in Windows with CMD

blog.farrosfr.com 2025
Cybersecurity
Mar 22, 2025

Web Application Basics | study notes

blog.farrosfr.com 2025
Field Notes
Nov 20, 2024

Migrate Email Using IMAP Async with Only One Active Domain

Learn how to migrate email hosting from emailkerja.id to Hostinger using IMAP sync and DNS configuration for better capacity and cost-efficient marketing.

blog.farrosfr.com 2024
Field Notes
Oct 25, 2024

Financial Mathematics: Interest and Usury

blog.farrosfr.com 2024
Cybersecurity
Oct 17, 2024

Comprehensive Guide to Google Dork Operators and Their Usage

Learn how Jamstack enhances web security and speed. Discover how JavaScript, APIs, and Markup create scalable, high-performance sites with a modern Git workflow.

blog.farrosfr.com 2024
Field Notes
Sep 12, 2024

Prevent SQLi with Validators and Prepared Statements

blog.farrosfr.com 2024
Web & Systems
Sep 3, 2024

Building a Digital Library with JavaScript

blog.farrosfr.com 2024
AI & Systems
Aug 30, 2024

OpenAI JavaScript API: Building a Recipe Blog

blog.farrosfr.com 2024
Field Notes
Aug 25, 2024

Aristotles Critique of Usury & The Natural Order

blog.farrosfr.com 2024
Field Notes
Jul 31, 2024

Comparison Between Edging and Relapse in Addiction

blog.farrosfr.com 2024
Field Notes
Jul 5, 2024

Enhancing Protection with Input Validation and Sanitization

blog.farrosfr.com 2024
Web & Systems
Jul 1, 2024

Combining ParamSpider and Dalfox in Kali Linux

blog.farrosfr.com 2024
Field Notes
Sep 26, 2023

The Value of Martial Arts in Work

Martial artist (Karate, Pagar Nusa, Wushu, Boxing) applying combat values to life: humility, courage, and protecting the weak. Hard work for an honest, halal life.

blog.farrosfr.com 2023
AI & Systems
Sep 16, 2023

From Corporate Insider to Change Agent (Anti-Usury)

blog.farrosfr.com 2023
Field Notes
Apr 1, 2023

Archive Directory

blog.farrosfr.com 2023