Static Application Security Testing (SAST) isn’t just theory. In this article, I’ll walk through building a real, hands-on Python security…

In November 2024, I got a chance to attend Blackhat MEA CTF. It was a great experience competing globally and It was my first experience of…

Prior to learning ethical hacking, I used to think security failures happened because attackers were exceptionally smart. Over time, I…

Introduction

Hello, Dear Reader. I hope you are in good health. I was inactive for a very prolonged period of time due to my University Final Semester…

“The system crashed… but memory never forgets.”

What is PCI DSS?

📌 Introduction

How a single misconfigured endpoint exposed users and allowed the creation of administrator accounts

Free Wi-Fi feels like a blessing. You walk into a café, airport, hotel, or shopping mall, connect with one tap — and boom, the internet is…

We can achieve that by using various of tools and techniques to obtain foothold on the target, by using enumeration, scanning and other…

Introduction

In this walkthrough, I investigate security alerts as a SOC analyst using Kibana (Elastic Stack). The focus is on triaging alerts…

Güvenlik Operasyon Merkezlerinde (SOC), çok sayıda farklı kaynaktan gelen log ve güvenlik verilerini anlamlandırmak ciddi bir zorluktur…

APIs sit quietly behind almost every payment we make today. From card payments and mobile wallets to e-commerce checkouts and fintech apps…

📌 Introduction

Why I built a lightweight “Burp Suite Lite” for Firefox to stop context-switching.

You can memorize tools, pass certifications, and still miss the one skill that actually keeps systems safe.

Introduction

Cross-Site Scripting (XSS) is a vulnerability that compromises the interaction a user has with a vulnerable web application. It allows an…

Password cracking is something we encounter more often than we realize, and it may have already affected you without your knowledge.