Naman Dixit
Founder & CEO, WarnHack
Naman is the founder of WarnHack. He spent five years across penetration testing, infrastructure security, and cybersecurity training before starting WarnHack to build the secure-access tooling he wished had existed for lean engineering teams. He writes about access governance, Linux security operations, and what it actually takes to build a security product company from India.
Articles by Naman Dixit
Lab: Issuing Ephemeral OpenSSH Certificates via GitHub Actions OIDC Without Static Deploy Keys
Replace static CI/CD deploy keys with short-lived OpenSSH certificates signed by HashiCorp Vault using GitHub Actions OIDC token federation.
Post-Exploitation Agent Hijacking: Why Malicious CLI Dependencies Target SSH_AUTH_SOCK
Understand how attackers exploit SSH_AUTH_SOCK for lateral movement. Detect socket hijacking with auditd and replace agent forwarding with ProxyJump.
SSH to SIEM Integration: Collecting, Normalizing, and Alerting on Shell Activity
Learn how to capture immutable SSH execution telemetry using OpenSSH VERBOSE logging and Linux auditd execve syscall rules for SIEM ingestion.
Lab Notes: Eliminating Static CI/CD SSH Keys Using OpenSSH Match Exec and OIDC Tokens
Learn how to replace static CI/CD SSH keys using OpenSSH Match exec, ambient OIDC tokens, and dynamic ephemeral certificate generation.
The MFA Bypass Trap: Why ChallengeResponseAuthentication and PAM Stacking Can Create Hidden Backdoors
Understand how PAM jump logic in common-auth causes silent SSH MFA bypasses, and how to configure requisite modules and OpenSSH AuthenticationMethods.