A simple breakdown of the Axios supply chain attack — and what every developer must check right now

🌐 Introduction

1. What these tools actually do

Four zero-days in one quarter. Active exploits in the wild. And your browser might still be vulnerable right now.

Researcher: Tyreek Haynes
Severity: Medium (Information Disclosure)
CVSS Score: 5.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
CVE Status…

AI-generated code hardcodes API keys, tokens, and passwords by default. Here’s why, what to grep for, and the two free tools that kill it.

In a Security Operations Center (SOC), we often say, “You cannot defend what you cannot see.” But here is the catch if you try to see…

This is meant to be a technical review of the TryHackMe Boogeyman 1 challenge. I will try to write as comprehensively as possible to…

As a junior penetration tester, I spent a lot of time learning how attacks work — brute-force, enumeration, credential stuffing…

The digital landscape continues to evolve, and with it, the structure of hidden online environments. Over time, researchers have identified…

Flag Hints

Previously on Cooctus Tracker Overpass has been hacked! The SOC team (Paradox, congratulations on the promotion) noticed suspicious…

When you start developing full-stack web applications, you start to look at the internet differently. You don’t just see a clean user…

The uncomfortable truth about modern vulnerability scanners

Browser Configuration Before connecting to TOR

The Password Reset Token That Didn’t Actually Matter

A windows machine has been hacked, its your job to go investigate this windows machine and find clues to what the hacker might have done.

Difficulty: Medium
Time Required: 35 min

Module — — > Network Security

Hi, friends! Welcome to another article of the write-up series. In this blog, I have described the complete walkthrough of the GoldenEye…

A Walkthrough room to teach you the basics of bash scripting