Password spraying is a targeted login attack used to gain initial access or expand presence inside a network. Instead of trying many…

Conduct top-tier investigations using tools and strategies you already have.

AHi everyone, it’s been a while, right? This time, I’m going to explain a vulnerability I discovered in the system a few days ago. Please…

Some Logic Bugs in Email Handling الحمدلله والصلاة والسلام على رسول الله A few small inconsistencies in email handling logic were enough to break trust in account …

Welcome back readers! It has been quite a while since I wrote on medium. This piece if writing will contain some of my findings which I…

The most uncomfortable security experiment I’ve ever run

Evening friends. I am still working my way through the famed LainKusanagi list as part of my preparation for the OSCP and this was the…

The hybrid Claude + Ollama setup that makes Talon production-ready

Introduction

“c4n y0u c4p7u23 7h3 f149?”

Twenty years ago, the tech world learned a painful lesson: Never trust user input. We spent two decades perfecting parameterized queries…

⚠️ Disclaimer

✍️ Introduction

⚠️ Disclaimer

The gap we don’t talk about in incident response

curl is only simple until you learn which flags change everything.

I worked on the Masquerade room on TryHackMe, where I investigated a malware incident involving a malicious PowerShell script, network…

Free WiFi feels like a blessing.

The Biggest Security Mistake SaaS Teams Make Before Launch

A hands-on walkthrough of MS17-010 exploitation, credential dumping, and what it all means from a defender's perspective.