--- title: Best InfoSec Write-ups posts — August 2024 | daily.dev description: The most upvoted InfoSec Write-ups posts from August 2024, curated by the daily.dev community. canonical: https://daily.dev/sources/infosecwriteups/best-of/2024/08 twitter:card: summary_large_image twitter:site: @dailydotdev og:url: https://daily.dev/sources/infosecwriteups/best-of/2024/08 og:type: website og:site_name: daily.dev og:title: Best InfoSec Write-ups posts — August 2024 | daily.dev og:description: The most upvoted InfoSec Write-ups posts from August 2024, curated by the daily.dev community. og:image: https://media.daily.dev/image/upload/s--VAY5ToZt--/f_auto/v1724209435/public/daily.dev%20-%20open%20graph --- # Best of InfoSec Write-ups — August 2024 1. 1 [](https://daily.dev/posts/cracking-windows-10-hashes-dgf0rr3hk "Cracking Windows 10 hashes") Article InfoSec Write-ups · 2y Cracking Windows 10 hashes Learn how to dump and crack Windows 10 hashes using Mimikatz and Hashcat. The guide includes disabling Windows Defender, downloading Mimikatz, running commands to escalate privileges, and using Hashcat with a word list to crack the retrieved NTLM hashes. 66 2 2. 2 [](https://daily.dev/posts/level-up-your-linux-fu-essential-linux-skills-for-cybersecurity-newbies-pvbq8hkno "Level Up Your Linux-Fu: Essential Linux Skills For Cybersecurity Newbies") Article InfoSec Write-ups · 2y Level Up Your Linux-Fu: Essential Linux Skills For Cybersecurity Newbies Mastering Linux is essential for aspiring cybersecurity professionals. This post covers practical steps to boost your command line, scripting, and automation skills. Key areas include understanding fundamental Linux commands, choosing security-focused distributions like Kali Linux or Parrot Security OS, and learning core security tools such as Nmap, Metasploit, and Wireshark. Additionally, scripting in Bash and Python for automation is crucial, along with customizable shell environments like Zsh. Recommended resources are provided for continuous learning and practice. 24 1 3. 3 [](https://daily.dev/posts/oauth-security-complete-guide-in-this-blog-we-will-uncover-the--cqado3rdx "OAuth Security: Complete Guide. In this blog, we will uncover the…") Article InfoSec Write-ups · 2y OAuth Security: Complete Guide. In this blog, we will uncover the… OAuth is a popular authorization protocol allowing third-party services to access user resources without revealing credentials. Common vulnerabilities include client secret exposure, CSRF, open redirects, and improper token usage. Security can be enhanced by proper client secret management, using the state parameter for CSRF protection, validating redirect URIs, and ensuring token confidentiality. OAuth 2.0's PKCE provides additional security for public clients without a client secret. OpenID Connect builds upon OAuth for user authentication. 14 [See all InfoSec Write-ups archives](/sources/infosecwriteups/best-of) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@graph":[{"@type":"CollectionPage","@id":"https://daily.dev/sources/infosecwriteups/best-of/2024/08#page","url":"https://daily.dev/sources/infosecwriteups/best-of/2024/08","name":"Best InfoSec Write-ups Posts — August 2024","description":"The most upvoted InfoSec Write-ups posts from August 2024, curated by the daily.dev community.","isPartOf":{"@type":"WebSite","url":"https://daily.dev"}},{"@type":"ItemList","@id":"https://daily.dev/sources/infosecwriteups/best-of/2024/08#items","numberOfItems":3,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://daily.dev/posts/cracking-windows-10-hashes-dgf0rr3hk","name":"Cracking Windows 10 hashes"},{"@type":"ListItem","position":2,"url":"https://daily.dev/posts/level-up-your-linux-fu-essential-linux-skills-for-cybersecurity-newbies-pvbq8hkno","name":"Level Up Your Linux-Fu: Essential Linux Skills For Cybersecurity Newbies"},{"@type":"ListItem","position":3,"url":"https://daily.dev/posts/oauth-security-complete-guide-in-this-blog-we-will-uncover-the--cqado3rdx","name":"OAuth Security: Complete Guide. In this blog, we will uncover the…"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Sources","item":"https://daily.dev/sources"},{"@type":"ListItem","position":3,"name":"InfoSec Write-ups","item":"https://daily.dev/sources/infosecwriteups"},{"@type":"ListItem","position":4,"name":"Best of","item":"https://daily.dev/sources/infosecwriteups/best-of"},{"@type":"ListItem","position":5,"name":"August 2024"}]}]} ```