Back in June 2024, I wrote Secrets in the Wild: Uncovering Hidden Threats about credentials leaking through public sources — Postman…

Go beyond basic enumeration — use DNSenum like a pro to uncover hidden assets, misconfigurations, and potential attack vectors.

Your first step into the world of DNS reconnaissance — discover how hackers map the internet’s hidden connections.

Learn Like a Pro Hacker

TL;DR Walkthrough of the TryHackMe Advent of Cyber 2025 Day 24. This room is all about probing webservers with curl, or Invoke-WebRequest…

A quick walkthrough of the TryHackMe “Library” roon, covering everything from enumeration to root privilege escalation

Thank you for reading my first blog post! It was written by me, about my adventures in taking on the Gandalf challenge, along with the help…

When most people hear “IDOR,” they picture one thing:

Robin is an AI-powered tool for conducting dark web OSINT investigations. It leverages LLMs to refine queries, filter search results from dark web search engines, and provide an investigation summ…

Hackers are shifting tactics. Learn how fake Web3 job postings and malicious interview apps are used to compromise high-value crypto…

Hey there, back again with another post! 😄

Security Architecture and Engineering Made Fun (Yes, Really!)

Burp Suite is widely regarded as the king of application penetration testing, especially when it comes to web applications. While Burp now…

As I begin my journey into ethical hacking, I discovered Gandalf, Lakera’s interactive security challenge. This gamified platform…

I asked the server a simple question, and it responded with an entire phonebook.

When Whitelists Fail: Bypassing SSRF Protections with URL Parsing Tricks.

Did you know the average attacker lurks undetected for over 200 days in a compromised network? Most people think blue teams just wait for…

Advanced WAF Bypass Reflected XSS in search bar Hi, Our discussion tonight will dive into a detailed explanation how i bypassed the strongest WAF i’ve ever seen that blocks every known and unknown …

A practical mindset for modern bug hunting.🤞😌

I have heard it a hundred times and I’m sure you guys also heard it similer “Linux is secure”. Linux doesn’t get viruses”. “Linux is safer…