“Series 2 of my learning journey in cybersecurity: Exploring RATs through ethical hacking and safety tips for students and learners.”

Some of the most interesting vulnerabilities are not where you expect them.

Some vulnerabilities require sophisticated tools and deep technical knowledge to exploit. This one requires a curious mind, a browser, and…

(Çalınan Hesaplar, Kartlar ve Kişisel Bilgiler Nerede ve Nasıl Pazarlanıyor?)

Contemporary cybersecurity training is overwhelmingly procedural. It emphasizes tools, techniques, and repeatable methodologies designed to…

Description : lucrecia has installed multiple web applications on the server.

The internet is the biggest machine ever built. To make it work, engineers use a blueprint called the OSI Model (Open Systems…

Money transfers on the dark web are often misunderstood. Unlike traditional financial systems, transactions within anonymity networks rely…

Hashing, Salting & Encryption — What Every Security Professional Must Truly Understand

Introduction

Simple Splunk queries to detect Entra ID attacks and threats

In this project, I put on my “black hat” and simulate a data breach of a fake company’s network by exploiting several vulnerabilities. My…

I’ve spent countless hours exploiting SQL injection flaws, and it always comes down to one stupid-simple mistake: pasting user input…

Introduction

A long, long time ago, in a land free of binary exploit mitigations, when Unix still roamed the Earth, there lived a pre-authentication Telnetd vulnerability.

In fact, this vulnerability was born so long ago (way back in 1994) that it may even be older than…

Short story

SPKI pinning and TLS can prove that a mobile app reached the correct backend over a protected channel. They cannot prove that the client…

The pipeline from post one catches a lot. SAST finds insecure code patterns before they ship. Dependency scanning finds vulnerable…

Community Semgrep rulesets are a good starting point. The OWASP Top 10 pack, the secrets detection rules, the language-specific security…