1. Introduction

As AI systems begin interacting directly with enterprise tools through MCP, traditional gateway-based security models may not be enough…

BeatBanker Android Trojan spreads via fake Google Play Store pages, using a silent audio loop to stay active while stealing crypto, banking data, and login credentials.

Hey there!😁

AI assistants are everywhere now.

Finding PII via Broken Access Control.

Most security failures are not about someone breaking down the door. They are about the system quietly forgetting to lock it in the first…

Target IP

A quick CTF walkthrough on web enumeration, Hydra brute-forcing, and cracking SSH keys.

Room CTF “Attacktive Directory” di TryHackMe dirancang untuk mengajarkan cara mengeksploitasi kerentanan umum pada lingkungan Windows…

Hello everyone! This is an hard rated room from the TryHackMe platform titled “URANIUM CTF”

Tryhackme | AD: Basic Enumeration Diberikan sebuah akses VPN ke jaringan target pengguna tanpa kredensial yang mana membutuhkan pengumpulan data informasi sebanyaknya mungkin pada domain tersebut …

Subtitle:

This project aims to expand our cybersecurity lab by installing Windows 10 as our second Virtual Machine in VirtualBox.

[Intro]

Finding Hidden Endpoints in JavaScript: How I Discovered an Unauthenticated Password Update Function While testing a web application in a Vulnerability Disclosure Program, I came across an …

Assalamualaikum and Hi! Here with me again, this write-up just been made after I already been awarded with $$$. Let’s get started! 😃

Introduction

When Settings Become Shell, Gemini CLI executes tools.discoveryCommand from .gemini/settings.json during startup tool discovery, turning a…

A beginner bug bounty story about discovering a CAPTCHA bypass in a NASA reporting system and learning the importance of persistence.