https://www.hackpie.com/HackpieCTF Writeups, Red & Blue Teaming Tools, Cyber security News and Exploit Development 2025-07-27T07:30:17+00:00 0xtmax https://www.hackpie.com/ Jekyll © 2025 0xtmax /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png How to Build a CI/CD Pipeline with AWS CodePipeline , S3 and GitHub for React Apps2025-07-24T16:00:00+00:00 2025-07-27T07:29:52+00:00 https://www.hackpie.com/posts/How-to-Build-a-CICD-Pipeline-with-AWS-CodePipeline-S3-and-GitHub-for-React-Apps/ 0xtmax Deploying applications manually can be time-consuming and prone to errors. As developers, we need a system that ensures our applications are built, tested, and deployed quickly and reliably—that’s where CI/CD comes in. In this blog, we will talk through the process of creating a fully automated CI/CD pipeline using GitHub, AWS CodePipeline, AWS Code Build and Amazon S3. By the end, you will ha... Building a Realistic Enterprise Level SOC LAB for Blue & Red Teamers - Part 22025-07-17T16:00:00+00:00 2025-07-18T04:47:49+00:00 https://www.hackpie.com/posts/Building_SOC_LAB_PART2/ 0xtmax Network Segmentation, Security Configurations & pfSense Firewall Rules Hey again, folks! If you’ve followed along in part1, you’ve already seen how i kicked off my journey to build a real world inspired soc lab right from home — with a strong focus on Blue & Red team perspectives, Active Directory, Segmented Networks, VPN Tunneling and SIEM Integration. In this part, we step into the ... How I Took Over a Microsoft Entra ID Account Using Phishing & 2FA Bypass2025-07-03T16:00:00+00:00 2025-07-04T11:18:48+00:00 https://www.hackpie.com/posts/How-i-Took-over-Microsoft-Entra-ID/ 0xtmax Disclaimer This guide is strictly for educational purposes and red team simulation within authorized environments. Unauthorized phishing or impersonation of login portals is illegal. This guide walks you through configuring a Microsoft 365 phishing campaign using Evilginx2, a VPS, and a subdomain (login.hackpie.com). It includes DNS setup, phishlets customization, TLS fixes, and redirect... Building a Realistic Enterprise Level SOC LAB for Blue & Red Teamers - Part 12025-04-23T16:00:00+00:00 2025-07-18T04:41:46+00:00 https://www.hackpie.com/posts/Building_SOC_LAB_PART1/ 0xtmax Hey folks, I’ve always been fascinated by the idea of building my own Security Operations Center (SOC) lab at home — not just any lab, but one that brings together realistic enterprise segmentation, SIEM monitoring, VPN connectivity between two isolated hosts, high level network segmentation, and an external attacker simulation. After countless trials, configurations, and creative tweaks using... Setting Up an Elasticsearch Cluster with Kibana, Filebeat, and Metricbeat on AWS (CentOS 7)2025-03-24T16:00:00+00:00 2025-03-24T16:00:00+00:00 https://www.hackpie.com/posts/Building_ELK_Cluster/ 0xtmax Introduction Hey folks, Welcome back :) In this blog post, I will walk you through the detailed process of setting up an Elasticsearch Cluster along with Kibana, Filebeat and Metricbeat on AWS EC2 instances running CentOS 7. We will cover everything from server deployment, VPC Setup, Firewall rules, cluster Configuration and dashboard access. In the next phase of this blog, i will automate all...