Hello, stranger — let’s begin.

Room n1 — Exploring SPL

Full Exploitation of a Windows Server via Apache Tika

Merhaba arkadaşlar, bugün TryHackMe platformu üzerinde bulunan Anonforce odasını çözeceğiz. İlk başta terminalimizden vpn konfigürasyon…

Merhaba arkadaşlar, bugün TryHackMe üzerinde bulunan Cooctus Stories odasını çözeceğiz, her zaman olduğu gibi ilk başta VPN bağlantısını…

Ticket 621074, here we discuss the “trade deal”. They try to be as silent as possible. Perhaps if you don’t want to do business, just ban…

Web3 security does not fail because of a lack of capable researchers, thoughtful protocol teams, or capital willing to pay for safety. It…

Buying external network penetration testing is completely broken. You’re either stuck paying $20,000 with a month-long wait times or…

The Defensive Techniques That Keep Your Application Safe from Attackers

by Rachel Glass, MA CLC

CodeTwo Walkthrough

In this write-up, we’ll walk through the exploitation of the Blackgate Linux machine. Initial access is achieved through a misconfigured…

1. Why Data Pipelines Matter More Than Dashboards

A hands-on guide to validating OWASP ModSecurity Core Rule Set in AEM as a Cloud Service using Apache Dispatcher and go-ftw.

Con todo esto que está pasando en mi país con cuestiones de datos, hackeos y cosas recientes, hablando con un amigo, hablamos sobre lo que…

Most users ignore SOP and CORS. Attackers don’t. See how these silent rules protect — or expose — your web data.

Everyone in cybersecurity is “using ChatGPT” now. But let’s be honest: most people are still asking it things like “Explain phishing” or…

In today’s digital world, most applications are web-based. From login pages to payment systems, everything works through the web. This also…

You have probably heard the phrase “AI lethal trifecta.” It refers to systems that combine autonomy, access to tools or actions, and access…

I am a CSE student with interest in web application security. While exploring a college website with defensive perspective. I found that…

The cybersecurity arena heated up during the week of January 25–31, 2026, with zero-days hitting enterprise favorites like Microsoft Office…