Apache, MySQL, Flask Web App, Custom Domain, HTTPS Traffic Analysis & Bug Bounty on Kali Linux

A technical taxonomy of GraphQL attack classes that most security tools still miss.

How X Business Was Taken Down by a “Ghost-in-the-Printer” Attack

And yes, AI is on the list — but not for the reason you think.

User Mode, Kernel Mode and Why It Matters

AI systems are now both weapon and target in cybersecurity’s fastest-moving arms race.

Target IP: 10.10.186.106

Recently I passed the eLearnSecurity Junior Penetration Tester (eJPT) certification with 97%, and it took me around 10 hours to complete…

I recently began reviewing some material to reinforce my understanding in some areas. During a session where I was practicing File Transfer…

A story about curiosity, business logic flaws, and the painful ending of a duplicate report 😅

I almost closed the Burp Suite tab.

DEALS!!!! WhatsApp:+1(616) 202 1156 HOT DEALS!!I
DREAM CHASER
ALBERT’S CASH TEAM SERVICE WORLDWIDE(GET RICH NOW/SOLVE ALL PROBLEM NOW)…

Welcome to this new Medium post. In today’s article, we will look at how kernel read and write primitives can be exploited using a BYOVD…

Is it possible to know if a partner is hiding something on their phone, even if they use disappearing messages? As someone who works deep in the technical side of mobile forensics and device …

-NETWORKING SECURE PROTOCOLS-
Task 1 — Introduction
Networking Core Protocols — Türkçe Özet

The goal of this room was to gain access to the administrative dashboard by identifying the password for the admin user and retrieving the…

This article provides a complete guide to understanding, executing, and defending against Address Resolution Protocol (ARP) spoofing, also…

A critical 9.8 CVSS pre-auth buffer overflow in GNU Inetutils telnetd allows attackers to execute arbitrary code and gain root access. Patch immediately.

Trend Micro exposes KongTuke's new "CrashFix" tactic, which tricks enterprise users via fake Chrome errors into deploying the fileless modeloRAT backdoor.

Cyfirma uncovers the RuTaxi Android banking Trojan, a highly persistent malware using VNC capabilities to hijack Russian bank accounts and crypto wallets.

A pre-auth flaw in OpenSSH's GSSAPI Key Exchange (CVE-2026-3497) exposes Ubuntu and Debian servers to heap corruption and data leaks. Patch now.