When people think about penetration testing tools, they usually jump straight to the popular names:
Metasploit, Burp Suite, Nmap…

GitHub: https://github.com/SeifEldienAhmad/ghost0-Assistant

This is my writeup for the DroidCave challenge from 8kSec Android Labs. The goal is to build an app that looks completely innocent but…

Platform: TryHackMe
Room: Guided Pentest: Web
Room URL: https://tryhackme.com/room/guidedpentestweb
Difficulty: Easy
Please attempt the…

Learn about the essential tools for passive reconnaissance, such as whois, nslookup, and dig.

#3:

Fenomena penetration testing terhadap website dan sistem publik semakin sering ditemukan. Sebagian pelaku menganggap aktivitas tersebut…

The Cyber Kill Chain room is a beginner-friendly SOC Level 1 room that explains how attackers perform cyber intrusions step-by-step using…

بسم الله الرحمن الرحيم

Every day, millions of people use banking websites, shopping platforms, social media applications, and cloud services without realizing how…

Você já se perguntou como profissionais de segurança encontram vulnerabilidades em sistemas? Hoje eu vou matar sua curiosidade, pois vou…

1. Introduction: A Legacy Built on Proof, Not Promises

Prompt Injection, Hidden Instructions, and the New Security War Inside Large Language Models

Every proven method — from forgotten passwords to hacked accounts, disabled profiles, and deleted data — with professional security…

Finding hidden files and paths using simple discovery techniques

Ada pertanyaan yang cukup lama mengganggu kepala saya sejak mulai belajar keamanan siber.

This room is an IMINT (Imagery Intelligence) challenge focused on identifying real-world locations using visual clues such as signage…

This is a write-up and walkthrough for the Boogeyman 1 room.

Gobuster

30 days. Public. Still going.

We ran a focused campaign against the Android secure keyguard on a stock Pixel 9a (tegu, build CP1A.260505.005, locked bootloader, May 2026…