Hello, my name is Singkhon. After completing the eJPT course, I would like to share my methods and approaches for solving each CTF problem…

Enumeration

What RF Recon, Signal Analysis, and Physical-Layer Attacks Taught Me About Security

No Termux. No Root. Just a Browser and the Power of the Cloud.

tryhackme link → https://tryhackme.com/room/attacktivedirectory

Siber güvenlik staj sürecimde hem teorik hem de pratik olarak web ve mobil uygulama güvenliği üzerine yoğunlaştığım günlerden aldığım…

1. If we wanted to list all the .txt files in the current directory, what command would we want to use?
The command used is ls .txt. The ls…

From humble BSC beginnings to Smart Cashtags, Grokipedia verification, and the plot twist of the century.

Custom tiny wordlist to find information disclosure bugs

One random day.Bored of people. Bored of noise. Bored of everything.

The Project:

For years, security has been treated as a final checkpoint — something to “add” after features are complete. In today’s environment of…

The most fundamental thing when studying hacking is the “shell.”

Before tools, before frameworks, before hype, offensive security has always been about one thing: Thinking like an attacker. That…

Privileged accounts — admin, root, or superuser accounts — are high-value targets for attackers. Despite years of warnings, many…

A Case Study in Information Disclosure and Sensitive Directory Exposure

During my internship at Prodigy Info Tech, I developed a Network Packet Analyser using Python to analyse how data is transmitted across a…

🕵️‍♂️ Finding High-Impact Bugs Without Heavy Scanning

Ever feel like you’re drowning in manual recon work? You’re not alone. Here’s a wild stat: top bug bounty hunters reportedly automate up to…

‏

Lessons from a Rejected DeFi Audit Contest Submission