Learning to defend and attack systems the ethical way — tools, labs, walkthroughs, and principles.
Transfer files over SSH on Ubuntu using SCP, SFTP, and rsync. Worked examples for upload, download, recursive copies, preserving permissions, and when to use wh
SCP and SFTP on Ubuntu: Transfer Files Over SSH (with Examples) Read More »
Install and configure fail2ban for SSH on Ubuntu. Default jail config, custom ban times, whitelisting your own IP, and how to unban yourself when you inevitably
Fail2ban for SSH on Ubuntu: Setup, Tuning, and the Lockout Trap Read More »
Eight SSH server settings that close the brute-force vector. Disable password auth, restrict users, change the port, set MaxAuthTries, and more. Tested on Ubunt
SSH Server Hardening: 8 Settings That Stop Brute-Force Logins Read More »
Generate, install and use SSH keys on Ubuntu. Covers Ed25519 vs RSA, key permissions, ssh-copy-id, the authorized_keys file, and the agent.
How to Set Up SSH Key Authentication on Ubuntu (Keygen to Login) Read More »
Step-by-step SSH setup for Ubuntu Server. Covers 22.04, 24.04, and 26.04, including the systemd socket activation change in 24.04 that breaks most older tutorials.
Enable SSH on Ubuntu Server: Complete Setup Guide (22.04, 24.04, 26.04) Read More »
Vaultwarden with Docker Compose (Short Answer) Vaultwarden is a lightweight, self-hosted reimplementation of the Bitwarden server, written in Rust. Default port: the container listens on port 80 internally; map it to any host port you like, or publish nothing and let your reverse proxy reach it over a Docker network. There is no second port
How to Install Vaultwarden with Docker Compose (Bitwarden Self-Hosted) Read More »
This week a global medical technology company had their Microsoft tenant compromised. The attackers didn’t deploy custom malware. They logged into the Intune admin console and used the built-in device management tools to trigger a bulk wipe across the entire managed device fleet. From the field: This is the detection rule I would want in
How to Prevent an Intune Bulk Wipe: Sentinel KQL + Hardening Read More »
The UK, US, Australia, EU and Canada all publish cybersecurity frameworks with the same five controls. If you run a homelab, you already practise all five – not because you studied a framework, but because things break if you don’t.
5 Security Basics Your Homelab Already Teaches You Read More »
Still port forwarding in 2025? Stop. This guide walks you through real-world security for your Raspberry Pi or homelab — Zero Trust, backups, and monitoring included.
How to Secure a Homelab Network in 2026: 7 Steps Before You Expose Anything Read More »
ReadTheManual is the homelab-to-enterprise translation layer for the Technical Climber. Lab to Leader, Ballet to Combat, real projects mapped to real career value. No gatekeeping, just the guides we wished existed when we were climbing.
Welcome to ReadTheManual: Day One of Something Big Read More »
