Posts

Top 10 Cybersecurity Mistakes That Put You at Risk (And How to Fix Them)

Image
In today’s hyperconnected world, our personal data is more valuable than ever. Every login, every online purchase, and every file we store on the cloud carries digital fingerprints. Cybercriminals know this, and they are constantly improving their methods to exploit our mistakes. The majority of hacks don’t happen because systems are unbreakable — they happen because people make avoidable cybersecurity mistakes. In this article, we reveal the Top 10 Cybersecurity Mistakes That Put You at Risk , explain why they matter, and give you exact steps to protect yourself. 1. Using the Same Password Everywhere One of the most common — and dangerous — mistakes is reusing the same password across multiple websites. If just one website is breached, attackers can use that same password to access your: Email Social media accounts Banking apps Cloud storage This method is called credential stuffing . ✅ How to fix it: Create a unique password for each account. Use a pass...

How to Install and Configure Evilginx2 on a Digital Ocean VPS [2025 Guide]

Image
  Introduction: Evilginx2 is a powerful phishing framework often used by red teamers and ethical hackers to simulate advanced man-in-the-middle attacks. In this guide, I’ll show you how to install and configure Evilginx2 on a DigitalOcean VPS from scratch. ⚠️ Disclaimer: This guide is for educational purposes only. Do not use Evilginx without proper authorization.   Prerequisites A registered domain name A DigitalOcean VPS (Ubuntu 20.04 or later) Basic Linux terminal knowledge An SSH client Step 1: Set Up Your VPS Create a Droplet on DigitalOcean (Ubuntu 20.04 LTS or later version).  SSH into your VPS:  ssh root@your_server_ip Step 2: Update & Install Dependencies apt update && apt upgrade -y apt install wget curl golang unzip nano -y Step 3: Go to google and search for evilginix        Go to releases--- choose the latest for Linux        Right click and copy link address       wget...

How to build your SMTP server

Image
This are commands used on the video for ease of following up  sudo hostnamectl set-hostname mail.notuuk.com sudo nano /etc/hosts    ( navigate to the last line and add ur domain mail.yourdomain.com)  ctrl x     y   enter hostname sh <(curl https://cyberpanel.net/install.sh || wget -O - https://cyberpanel.net/install.sh) RECORDS TO ADD type: A  name: @    ipv4: IP off proxy status ttl: auto type: A  name: mail    ipv4: IP off proxy status ttl: auto type: A  name: www    ipv4: IP off proxy status ttl: auto type: A  name: www.mailserver    ipv4: IP off proxy status ttl: auto type: A  name: www.mail    ipv4: IP off proxy status ttl: auto type: mx  name: @    mailserver: mail.yourdomain.com IP off proxy status ttl: auto type: txt type: txt

Evil-ginx On Local host

Image
  Evilginx is a type of tool known as a reverse-proxy phishing framework. Conceptually, it sits between a user and a real website and relays traffic while capturing session data and credentials. Because of its ability to intercept two-factor authentication tokens and session cookies, tools in this class are highly effective for targeted credential theft — and correspondingly, highly dangerous. That double-edged nature is why people in cybersecurity treat Evilginx-style tools carefully. On one hand, security professionals study them to understand attack mechanics so they can build defenses and detect abuse.  If your interest is legitimate — for example, you want to learn how attackers operate so you can defend systems — there are responsible ways to do that: Use Trusted Learning Platforms: Environments such as TryHackMe, Hack The Box, and OWASP Juice Shop let you practice offensive and defensive techniques legally in isolated, gamified challenges. They teach how attacks w...