# CyberUK (cyberuk.me)

> Personal website of CyberUK, a London-based system administrator and full-stack developer working in networking and cybersecurity. It has a portfolio of projects, a blog of security write-ups, and free browser-based security tools.

## About
- [About CyberUK](https://cyberuk.me/about): background, skills, homelab and system specs
- [Projects](https://cyberuk.me/work): websites, Discord bots and dashboards
- [Homelab](https://cyberuk.me/lab): the servers, storage and network CyberUK runs at home
- [Uses](https://cyberuk.me/uses): the machines and software CyberUK uses every day
- [Contact](https://cyberuk.me/contact)

## Free security tools
- [Password Tester](https://cyberuk.me/password-tester): Password strength tester and secure password generator; runs in the browser.
- [Recent Breaches](https://cyberuk.me/have-i-been-pwned): Latest data breaches plus a private leaked-password check using k-anonymity.
- [Security Header Checker](https://cyberuk.me/header-checker): Grades any website's HTTP security headers from A+ to F with fixes.
- [DNS & Email Security Checker](https://cyberuk.me/dns-checker): Checks SPF, DKIM, DMARC, DNSSEC, CAA and MTA-STS for any domain.
- [Phishing Link Checker](https://cyberuk.me/url-inspector): Expands short links, follows redirects safely and flags look-alike domains.
- [Hash & Encoding Toolkit](https://cyberuk.me/hash-tools): Base64/hex/URL encoding, SHA hashes, hash type identification and JWT decoding.
- [Service Status](https://cyberuk.me/status): Live uptime of the services and infrastructure CyberUK runs.
- [Cybersecurity News](https://cyberuk.me/news): Latest security news headlines.

## Projects
- [Dark: Discord Bot & Dashboard](https://cyberuk.me/work/dark-discord-bot): A security-first Discord bot with 80 commands, a live radio that talks over the music, and a framework-free web dashboard with 43 settings pages, all running in one Node.js process.
- [The Debug Shop](https://cyberuk.me/work/debug-shop): A fast storefront for The Debug Den, with a live catalogue managed from a Discord bot's dashboard and a secure third-party checkout, so the site itself never handles payments.

## Blog
- [DNS Spoofing and Cache Poisoning Explained](https://cyberuk.me/blog/dns-spoofing): How attackers forge DNS answers to send you to the wrong server, the famous attacks that shaped DNS security, and how to defend your resolver and your users.
- [SQL Injection: Defending Against Database Attacks](https://cyberuk.me/blog/sql-injection): Discover what SQL injection is, how it works, and the essential strategies to protect your web applications from this critical vulnerability.
- [The SolarWinds Supply Chain Attack: A New Era of Cyber Espionage](https://cyberuk.me/blog/solarwinds-supply-chain-attack): How attackers turned a trusted SolarWinds software update into a global espionage campaign, and what it means for software supply chain security.
- [The Equifax Data Breach: A Catastrophic Failure in Data Security](https://cyberuk.me/blog/equifax-data-breach): How the 2017 Equifax breach happened through an unpatched Apache Struts flaw, who it affected, and the lessons for patching and data protection.
- [Man-in-the-Middle Attacks: The Unseen Threat](https://cyberuk.me/blog/mitm-attacks): Explore the covert world of Man-in-the-Middle (MitM) attacks, how they work, and the crucial steps to safeguard your communications.
- [WannaCry Ransomware: The Global Cyberattack That Shook 2017](https://cyberuk.me/blog/wannacry-ransomware-attack): How the WannaCry ransomware spread worldwide in May 2017 using the EternalBlue exploit, the damage it caused, and the lessons that still apply.
- [DoS and DDoS Attacks: Overwhelming the System](https://cyberuk.me/blog/dos-ddos-attacks): Learn about Denial-of-Service (DoS) and Distributed Denial-of-Service (DDoS) attacks, how they work, and the strategies to defend against them.
- [ARP Spoofing: Unmasking the Deception](https://cyberuk.me/blog/arp-spoofing): Learn how ARP spoofing works, its impact on network security, and the best practices to defend against it.
- [Ransomware: A Digital Hostage Crisis](https://cyberuk.me/blog/ransomware): Understand the growing threat of ransomware, how it works, and what you can do to protect yourself and your organization from this costly attack.
- [Phishing: Don't Take the Bait](https://cyberuk.me/blog/phishing-attacks): Learn to recognize and protect yourself from phishing attacks, one of the most common and effective forms of cybercrime.
- [Cross-Site Scripting (XSS): The Web's Hidden Threat](https://cyberuk.me/blog/xss-attacks): What Cross-Site Scripting (XSS) is, the main types of XSS attack, and practical ways to protect your web applications from them.
- [HTTP vs HTTPS: Why the ‘S’ Matters for Your Website](https://cyberuk.me/blog/http-vs-https): Learn the differences between HTTP and HTTPS and why secure connections are non-negotiable in web development.
- [DHCP Starvation Attacks: Risks and Prevention](https://cyberuk.me/blog/dhcp-starvation-attacks): How do DHCP starvation attacks work, what are the impact on networks and how to prevent them.
- [MAC Flooding Attacks: Definition, Risks, and Prevention](https://cyberuk.me/blog/mac-flooding-attacks): A MAC flooding attack is a network security threat that exploits the limited storage capacity of a switch’s MAC address table.
- [Linking Website Domain to Discord](https://cyberuk.me/blog/linking-website-domain-to-discord): Discord has a cool feature called Connections, which lets you connect various services and accounts to Discord.
- [The 2013 Target Data Breach: A Wake-Up Call for Retail Security](https://cyberuk.me/blog/target-data-breach): How attackers reached Target's point-of-sale systems through a third-party vendor in 2013, the scale of the breach, and the lessons for retailers.
- [Stuxnet: The Dawn of Cyber Warfare Against Industrial Control Systems](https://cyberuk.me/blog/stuxnet-attack): How Stuxnet, the cyberweapon aimed at Iran's nuclear programme, sabotaged industrial control systems, and what it changed for critical infrastructure.

## Optional
- [Privacy Policy](https://cyberuk.me/privacy)
- [Terms of Use](https://cyberuk.me/terms)