Challenge Overview

A practical comparison of modern web application vulnerabilities and how the OWASP threat landscape is evolving. Web applications are…

This document summarizes key cyber threats identified between Mar 2 and Mar 8, 2026, including related threat events

TLDR: You built a RAG system to make your AI accurate and contextual. You fed it your documentation, your product data, your knowledge…

How are Groups and Privileges used by Windows in granting access? What about Integrity Levels?

Subtitle:

A practical, battle-tested guide for authorized web application security assessments

Testing BOLA, Broken Authentication, and BOPLA in Damn Vulnerable Bank using Burp Suite

Dalam beberapa tahun belakangan, ketertarikan pelajar terhadap bidang teknologi sangat meningkat. Banyak siswa SMP mulai memimpikan karier…

An electronics workbench has a particular smell. Warm solder. Dust from a rotary tool. Ozone. Plastic insulation heated a little too long…

Project 1 — Port Scanner (Threaded)

This report analyzes cyber threat activities targeting the manufacturing industry from January to December 2025.

Who Are You and What Can You Do? Meet AAA!

AI Pentesting isn’t how you think it is ⚠️ Disclaimer: This story is for educational purposes only, you are the only one responsible for your own actions! Imagine you’re in a pentest, the …

Introduction

🕵️ Traversed CTF Walkthrough Git Exposure to Root Difficulty: Easy–Medium Goal: Capture `user` and `root` flags 🔎 1. Reconnaissance I started with a full service and version scan: bash nmap …

Android applications are widely used for banking, social media, e-commerce, and many other services. These apps often handle sensitive…

Panduan Lengkap Eksploitasi Active Directory untuk Pemula

Active Directory (AD) merupakan layanan direktori dari Microsoft yang banyak digunakan oleh perusahaan untuk mengelola pengguna, komputer…