Hello, I’d like to share a recent experience with the community. If you have followed my blogs on penetration testing and privilege…

The Experiment

HackableII: A Purple Team Breakdown — From Anonymous FTP to Root, and Everything Security Onion Caught Along the Way Most CTF write-ups are just lists of commands. This one is different. I run a …

Paul and Max use a rather unconventional way to chat. They do not seem to know that eavesdropping is possible though…

Table of Contents

A Cloud Engineer’s honest account of diving into the world of API security

Most people use apps every single day without thinking about what is happening underneath. You tap a button, data moves, something shows up…

Some vulnerabilities get discovered, patched, and forgotten. SQL injection was discovered in 1998 and has been on every major security…

FBI warns gamers after malware hidden in several Steam games stole browser data and drained cryptocurrency wallets between May 2024 and January 2026.

While testing an e-commerce website as part of a bug bounty program, I came across an interesting business logic issue related to…

This Write-Up is the final task of the cyberdefender bootcamp, where we are introduced to a tool called Wazuh. Here, we will learn the…

Enumeration

Enumeration

CRYPTOGRAPHY BASICS-

Let’s get started.

AWS Bedrock AI tool flaw allows data leaks via DNS queries in AgentCore Code Interpreter sandbox, exposing sensitive cloud data, researchers warn.

Greetings to everyone from the beautiful atmosphere of Vichy…

Microsoft Defender Experts warn of Storm-2561 using SEO poisoning to distribute fake enterprise VPN clients like Pulse Secure, stealing user credentials.

Socket uncovers a Packagist supply chain attack targeting Vietnamese OphimCMS streaming sites with trojanized themes linked to sanctioned entity FUNNULL.

The Problem I Faced