Feast is an open-source feature store used in ML pipelines to define, store, and serve features. Users can register FeatureView specs —…

Introduction

TL;DR Walkthrough of the TryHackMe Metasploit Post Exploitation room and a note RE PsExec.

A spoiler free SOC investigation using web access logs EDR telemetry and MITRE ATTACK

Note on notation: Throughout this article, traversal sequences are written in “defanged” form — e.g. ../ instead of the literal…

Two hunters find the exact same IDOR. One gets $50 and a “Low” severity label. The other gets $8,000 and a personal thank-you from the…

A secret committed to a branch is already a problem. A secret merged into the default branch is usually a much bigger one.

Getting X followers changed character in January 2026, when the platform replaced its legacy recommendation system with a Grok-powered…

JSON JSON EVERYWHERRRREE !!!

Today I’m writing from a place of intuition, experience, and the deep curiosity that anchored me to the world of cybersecurity. This is my…

A few months into learning cybersecurity, I realized something that nobody tells you, hacking isn’t really about hacking.It’s about…

A common experience that everyone who has worked in a corporate setting goes through is the inevitable message of a cybersecurity awareness…

Inspecting the Web Application

Monitoring Active Directory: IIS, Web Shells, OWA, and VPN Authentication In the previous post, I touched upon domain vs. local accounts, as well as the mechanisms of Kerberos and NTLM authentication …

What is FuzzingLocalBot?

Hello everyone! I’m Omar Mohamed, also known as 0xnanashi.

A Company That Survived Everything Except a Leaked Password and the Ransomware Attack That Followed

“Jobs’ vision of Signal was the top 3 to 5 things you have to get done in the next 18 hours. Anything that stops you from doing that is the…

Hey Hackers, I am Parth Narula. A penetration tester, bug hunter, red teamer and overall a security researcher. I live for those moments…

Sensitive Debug Leakage