# Ghidra MCP: Let AI Help You Reverse Engineer Binaries
18 min read
A hands-on GhidraMCP walkthrough: install Ghidra 12.1.4 and GhidraMCP 2.0 on an Apple Silicon Mac, then find zlib's Adler-32 in a stripped binary over MCP.
/ tags/ cybersecurity
# STRIDE Threat Modeling Explained with an Example
10 min read
STRIDE threat modeling walked through on a chat app: spoofing, tampering, repudiation, information disclosure, DoS and elevation of privilege.
# Mastering Openssl Command and NSS Database Management
6 min read
Practical OpenSSL and certutil guide: inspecting certificates, managing PKCS#12 (PFX) files, and working with the NSS certificate database.
# Unlocking Web Security: Master JWT Authentication
11 min read
Understand JWT claims, token structure and signing algorithms, then build JWT authentication from scratch in Node.js with complete, runnable example code.
# OAuth 2.0 Authorization Code Flow, Step by Step
6 min read
The OAuth 2.0 authorization code flow step by step: each redirect and request, why the server returns a code instead of an access token, and its benefits.
# OAuth 2.0 Grant Types Explained (Is PKCE One?)
6 min read
The OAuth 2.0 grant types compared: authorization code, implicit, password, client credentials and refresh tokens, plus where PKCE fits.
# HTTP Basic Authentication Explained (RFC 7617)
7 min read
How HTTP Basic Auth works: the Authorization header, Base64 username:password, why it needs HTTPS, plus a Node.js and TypeScript middleware example.
# Password Authentication in Node.js: A Step-by-Step Guide
7 min read
Password-based authentication remains one of the most common and widely used methods to verify user identity in various online systems. It involves users providing a unique combination of a username…