“Everything works… until your users prove it doesn’t.”

Hi guys, it’s been a while since my last write-up.

Hello Hackers! 👋

Cryptography is often called “The Art of Secret Writing.”

In the world of cybersecurity, social engineering is constantly evolving. One of the most clever techniques used today is the…

Introduction:
While I was preparing for the OSCP exam, my friend had told me about the eJPT Junior Penetration Tester Exam by INE Security…

Seringkali, saat kita mendengar kata “Framework Cybersecurity”, yang terbayang adalah dokumen tebal, diagram yang rumit, dan teori yang…

Introduction Open HTTP Redirect adalah sebuah kerentanan dimana sebuah website membiarkan pengguna untuk “mengalihkan” (redirect) ke URL…

TL;DR: This blog goes into figuring out how MultiDesk encrypts passwords and how to decrypt them. You can find the tool here, or just load…

New York, USA, 17th February 2026, CyberNewswire

SINGAPORE, Singapore, 17th February 2026, CyberNewswire

SINGAPORE, Singapore, 17th February 2026, CyberNewswire

Title: How I Found a Clickjacking Vulnerability — A Beginner Friendly Real-World Walkthrough In this post I want to share a real practical learning experience from my security research journey …

So here’s the thing — I can get any AI model to tell me literally anything I want. Not with some fancy prompt injection or backdoor…

Your SOC doesn’t have an alert problem.

Photo by Markus Spiske on Unsplash

File upload flaw allows Python execution and remote shell access.

JWT cookie tampering leads to admin access and privilege escalation.

walkthrough THM Kenobi room

Introduction