A brutally honest lesson every OSCP+ learner needs to hear.

How I Used Gemini + HexStrike-AI on Kali Linux to Scan, Enumerate, and Exploit My Own Network

Hello everyone, its day 18 of AoC!!!!

Hey blue teamers. Security Information And Event Management (SIEM) is an essential tool for blue teamers. Today we are going to learn how…

sharpening CTF instincts through stego, crypto, reversing, and a lil’ chaos

Some vulnerabilities whisper instead of scream.  They don’t pop up with dramatic payloads, obvious SQL errors, or flashy admin bypasses…

Some vulnerabilities appear with fireworks — a broken auth flow, a misconfigured endpoint, a juicy SQL injection.

A deep dive into Rate Limiting, the adrenaline of the first find, and the harsh reality of the “Duplicate” status.

You know that feeling.

Siber Vatan Yolculuğu-5

The Convergence of Vulnerability and Ubiquity

Siber Vatan Yolculuğu -4

Hallo meine Freunde,

It’s the Difference Between Reading a Map and Walking the Terrain.

Most people think SQL Injection only works when there is a visible input box.
 DVWA’s High security level proves that this belief is wrong.

Firewalls can be patched.
Systems can be hardened.
But humans are still the weakest link.

In modern software teams, deployment speed has overtaken security cadence. We ship daily, but penetration tests still run annually. That…

AI and Automation in API Security: From Reactive Defense to Intelligent Protection APIs have quietly become the backbone of modern applications. Mobile apps, SaaS platforms, cloud-native …

Chaining IDOR, Stored XSS, and Insecure Email Change

I used to rush.

This is a technical write — up in which I will summarize 2 big themes: