Kalian perlu konteks dlu nih…

NOTE: This is the initial analysis of 0APT Group, which was later found to be fake. However, I have released 4 new samples along with the…

This is one of the many rooms of Love at First Breach 2026 by Tryhackme team. It is an interesting room that showcases cross-site scripting…

Generative AI (GenAI) models like Gemini, Claude, and ChatGPT are rapidly becoming “cognitive force multipliers” for vulnerability…

Step 1: Reconnaissance

Logic-Level Exploitation in Modern APIs

“Stop one link, stop the entire attack.” — Lockheed Martin Cyber Kill Chain

I’ve spent decades in information security.

CSRF in GraphQL: How a “Fixed” Vulnerability Still Allowed a Bypass

🎯 Room: LazyAdmin (TryHackMe)

Platform: TryHackMe
Room: Gobuster: The Basics
Room URL: https://tryhackme.com/room/gobusterthebasics
Difficulty: Easy
Please attempt the…

Introduction

Learn about how computers represent numbers and colors.

Prompt Injection

This challenge is from the Love at First Breach Valentine event on TryHackMe.

In the world of IT administration, we are the gatekeepers. We don’t let a server go live until it’s hardened, the policies are tight, and…

Free Link 🎈

When “Just This Once” Costs You Everything

When Help Desk Software Becomes an Attack Vector: Deep Dive into the SolarWinds Web Help Desk RCE (CVE-2025–40551)

In this article, we will understand CSRF Lab 8 from the Web Security Academy by PortSwigger.

Successfully Completed My 4-Week Cybersecurity Internship Over the past month, I gained hands-on experience in: Week 1: Security Threat Identification The first week focused on reconnaissance and …