Network traffic analysis is one of the most critical skills for hackers, defenders, and red‑team operators. Today we cover tcpdump, Tshark…

Arkadaşlar merhabalar bu eğitim serimizde biz NightOps Drop isimli aracımızı geliştirdik.

Darknet vendor-run shops can offer flexibility and direct interaction. However, without proper verification, you may risk scams, scams, or…

Serialization and deserialization are common operations in modern web applications. But when misused, they open the door to one of the…

Learn how to use basic commands in Kali-Linux that will help in ethical hacking

Bug bounty hunting isn’t always about breaking into systems or crafting clever payloads.  Sometimes, it’s about discovering something…

Some bugs are loud and dramatic.  Others slip in quietly, hiding in tiny assumptions — like how a website handles its URLs.

How I pushed myself to six flags by Day 3, hit dead ends, wasted over 12 hours, restarted environments, and eventually reached all 12 flags…

This is the challenge where I achieved second blood: XSS → SSRF → RCE

Samsung Foundry reached 60-70% 4nm yield, securing a $100M order for OPU chips from US AI startup Tsavorite, signaling recovery in high-end chip production.

Code for "search ads" was found in a ChatGPT Android build. OpenAI officially denied current testing, but high operational costs keep advertising speculation alive.

A previously undetectable Linux backdoor called GhostPenguin was exposed by AI-driven threat hunting. The C++ malware uses RC5-encrypted UDP for stealthy, multi-threaded C2 operations.

The Shanya Crypter (VX Crypt) is a new PaaS used by Akira/Medusa to bypass EDR. It deploys a kernel driver attack to kill security products and uses PEB manipulation for stealth.

A college student is selling access to 5,200+ gov/edu sites via the undetectable Beima PHP Webshell. The custom backdoor allows full RCE and fuels a growing cybercrime freelancing marketplace.

A malicious Go package typosquat (bpoorman/uuid) operated for four years, using a hidden Valid function to silently encrypt and exfiltrate sensitive data to dpaste.com.

Chinese APT Silver Fox is using a Cyrillic false flag in an SEO poisoning campaign impersonating Microsoft Teams. The attack installs ValleyRAT for espionage and financial fraud.

Evolved ClayRat spyware uses Accessibility Services to install a keylogger and lockscreen bypass. It leverages self-defense (blocking uninstallation) and screen recording for comprehensive surveillance.

A unique Android banking trojan, FvncBot, targets mBank (Poland) customers. It uses HVNC and H.264 to stream screens and performs web-inject attacks via FCM/WebSocket C2.

The JS#SMUGGLER campaign uses "Junk Code" JavaScript and fileless PowerShell executed via mshta.exe to bypass EDR. This multi-stage attack silently installs the NetSupport RAT.

A new C-compiled RAT, CastleRAT, uses Steam Community pages to hide its C2. The malware deploys advanced features like UAC Bypass, screen capture, and clipboard hijacking for espionage.

Despite takedown, LockBit 5.0 resurges as a cross-platform threat. The new variant blinds Windows Event Tracing (ETW), uses Invisible Mode for stealth encryption, and overwrites free disk space.