One day, I was hunting on NASA assets and testing different subdomains for security issues. While exploring one of the subdomains, I…

A weird reload, a log.io dashboard, plaintext passwords, and no tidy explanation. But I have a few theories.

One day while I was going to class, I was casually scrolling through Instagram.

Reversing a Custom Encryption Algorithm to Recover the Hidden Flag

Let’s kick off the room with a scan I do on every room, nmap.

Task 1: Introduction

A hands-on TryHackMe incident response walkthrough where a security analyst investigates a ransomware attack on a workstation, traces…

Machine link: https://app.hackthebox.com/machines/Authority

Introduction

I still remember the first time I saw:

In the world of security analysis, it’s easy to get carried away with the automated alerts of a SIEM. However, the analyst’s real work…

JWTs are trusted by millions of APIs worldwide: yet one small misconfiguration can turn a security feature into an attacker’s gateway

Hey everyone! 👋

A weird reload, a log.io dashboard, plaintext passwords, and no tidy explanation. But I have a few theories.

The cheapest, most effective first move when you crack open any embedded device

The numbers are staggering, the tactics are evolving, and 2026 is shaping up to be a record-breaking year.

Description : Learn the basics of host-server configuration reviews.

Unlike web apps, SCADA misconfigurations are not edge cases. They are the norm. This is a story about following a chain of them to its end…

Chaining API weaknesses to gain deeper access and expose data

Understand CSRF vulnerability and practice exploiting insecure state-changing requests.