Feeling overwhelmed by AI? Learn the Centaur Mindset. Read More →
A terminal showing ls crashes | wc -l returning 12165, then wuppiefuzz dedup reducing them to 10 unique clusters. Three clusters are highlighted in red: a 500 on POST /items, an incorrect response object, and a possible injection signature. The other seven are UnexpectedContent on every endpoint.

12,165 Crashes in 60 Seconds: Fuzzing a REST API with WuppieFuzz

Most REST APIs ship with two kinds of tests: unit tests that check functions in isolation, and integration tests that walk the happy path. “Create an item, read it back, delete it, get a 204.” Those tests are written by the same people who wrote the code, so they test the inputs those people expected. Nobody writes the test that sends a 65-character name, a quantity of 2^64, or a DELETE for an item that was never created, because nobody thought of it. ...

October 23, 2026 · 33 min · Scott Algatt
A grid of glowing containers with padlocks and a shield motif in a dark datacenter atmosphere

Container Security Fundamentals: What Actually Matters

It started with a misconfigured CI runner. A developer had a Jenkins pipeline building Docker images. The container ran as root. A dependency had a known RCE vulnerability. When the exploit landed, the attacker had root inside the container, and because that process was root, they also had root on the host. They pivoted to the secrets store, grabbed credentials, and spent three weeks inside the network before anyone noticed. ...

March 6, 2026 · 12 min · Scott Algatt

Container Networking Deep Dive: From Network Namespaces to Kubernetes

Container Networking Deep Dive: From Network Namespaces to Kubernetes Note: This guide is based on the Linux kernel networking documentation, Docker networking documentation (v24+), Kubernetes networking model documentation (v1.28+), and CNI specification v1.0. All examples use documented networking primitives and follow production container networking patterns. Container networking is fundamental to modern cloud-native applications. Understanding how packets flow from pod to pod, how services load-balance traffic, and how network policies enforce security requires knowledge of Linux networking primitives, Container Network Interface (CNI) plugins, and Kubernetes networking abstractions. ...

January 24, 2025 · 13 min · Scott

Deploy a Nanobus Web Server

After Trying Out Nanobus, I figured it was time to go a little deeper and try to deploy a Nanobus web server. As noted in my previous post, I hadn’t setup any transports for my hello world instance so I couldn’t interact with it when deployed as a container. I also realized that a <a href="https://hub.docker.com/r/nanobus/nanobus" rel="noreferrer noopener" target="_blank">nanobus/nanobus</a> docker image exists so there’s no need for me to roll my own either. ...

February 23, 2023 · 6 min · Scott

Configuring adminer for Oracle Databases

Quick Answer (Verified 2026): To configure Adminer for Oracle on Alpine Linux, you must install the Oracle Instant Client and the PHP OCI8 extension. This requires specific build tools and libraries like libnsl, libaio, and libnsl2. Follow the Dockerfile guide below to build a lightweight, secure container for Oracle database management. If you are not familiar with adminer, you can read more about it here. In short, it is a PHP script that allows you to manage various databases via a single interface. We have been successfully using the adminer official docker image from docker hub for a number of different databases. We now have a need to add Oracle as one of those databases to use with adminer. This initially seemed like a simple task. The docker hub page states ...

September 18, 2022 · 8 min · Scott