Vulnerabilty (kerentanan) adalah sebuah kelemahan, celah, atau kekurangan dalam sistem TI, baik itu perangkat lunak (software), perangkat…

Most people collect handheld consoles for nostalgia. I collect them because they talk back. Not literally, although one of my prototypes…

A National-level Cybersecurity competition

There’s something fascinating about watching a website breathe.
Every click, every request, every handshake all of it becomes visible when…

John the Ripper (often called John or JtR) is one of the most trusted password-cracking tools in cybersecurity. It’s fast, flexible, and…

Introduction

Understanding Firewall Rule Directionality: Inbound, Outbound & Forward

When attackers fail to breach a system, it’s often not because the vulnerability didn’t exist — 
 it’s because an IDS or IPS caught them…

Most organizations don’t get breached because hackers are brilliant.  They get breached because defenders are predictable.

While working through the PortSwigger Web Security Academy labs, I recently completed the “Exploiting Time-Sensitive Vulnerabilities” lab…

Or: How I Learned to Think Like Sherlock Holmes with a Debugger

Crashing drones analyzed with pymavlink parsers written by an all knowing LLM

Note: This write-up reflects my learning and hands-on practice based on the book The Web Application Hacker’s Handbook: Discovering and…

This time, I documented my learning process by working on challenges on the TryHackMe platform, specifically in the File Inclusion room…

After years of writing code and building features, I made a career pivot that initially surprised my colleagues: I transitioned from…

Active Directory attacks look impressive on paper, but without hands-on experience, they remain just commands and screenshots. GOAD is one…

Burp Suite in 2026: Why It’s Still the Heart of Web Application Security

Here’s Full breakdown for ethical hackers and beginner to gain understanding of networking service & protocols..

Hi hackers, Welcome to the latest edition of Bug Bytes (and the first of 2026)! In this month’s issue, we’ll be featuring:  Hijacking official AWS GitHub repositories  New anonymous bug bounty forum ...

Discover the stealthy XSS variant that strikes unseen, hijacks privileged sessions, and unlocks massive bounties — your guide to turning…