Hey there,

How I deployed an enterprise-grade web application security firewall and monitoring using only open-source tools

Note#:understanding CSRF (the basics)

Task 1: What is Content Delivery?
Firstly, we should ask, in the context of web application security, what is content? Content can be many…

Section 1: Introduction

Introduction

These are my notes as I worked through the “Introduction to Phishing” SOC simulation on TryHackMe.

Although OpenAI’s ChatGPT has already become remarkably articulate, the company is far from satisfied. According to information obtained by The Information, OpenAI is preparing to extend its ambit…

MediaTek has quietly refreshed its official website with a new processor dubbed the Dimensity 7100, positioned squarely in the mainstream segment and clearly intended as a successor to the long-se…

Back in June 2024, I wrote Secrets in the Wild: Uncovering Hidden Threats about credentials leaking through public sources — Postman…

Go beyond basic enumeration — use DNSenum like a pro to uncover hidden assets, misconfigurations, and potential attack vectors.

Your first step into the world of DNS reconnaissance — discover how hackers map the internet’s hidden connections.

Learn Like a Pro Hacker

TL;DR Walkthrough of the TryHackMe Advent of Cyber 2025 Day 24. This room is all about probing webservers with curl, or Invoke-WebRequest…

A quick walkthrough of the TryHackMe “Library” roon, covering everything from enumeration to root privilege escalation

Thank you for reading my first blog post! It was written by me, about my adventures in taking on the Gandalf challenge, along with the help…

When most people hear “IDOR,” they picture one thing: