Let’s be real — you’ve hit that login wall more times than you’ve hit “snooze” on a Monday morning. But guess what? Half the time, the devs…

Researcher: {Jack Man}

cybersecurity, pentesting, oscp, ethical-hacking, privilege-escalation.

The OliveX Files | By Damian Gambacorta

Know that i know this target open to shellshock vulnerability i will open Metasploit and find a exploit that will work on the VM.

From exposed AJP connectors to reliable post-exploitation workflows: the story behind Ghostcat-PWN and our experience with CVE-2020–1938

Part of the Networking Series — if you missed Week 9, go check out OSI and TCP/IP models first!

TL;DR: GraphQL introspection is a built-in, spec-compliant feature that — when left enabled on production endpoints — gives attackers a…

Splunk, SIEM, Log Analysis: Hands-on walkthrough of log ingestion, SPL querying, and basic security investigation using Splunk.

SOC Metrics, Incident Response, Blue Teaming: Understanding the key performance indicators that measure SOC efficiency, detection quality…

I began the assessment by performing a host discovery scan to identify active devices on the network. This scan confirmed that the target…

Initial Access

Hello! Some of you might know me (just kidding).

Here’s how to find them without overthinking.

While hunting for SQL Injection, I accidentally became the CEO of the Food Store.

Durante uma análise da plataforma DevHub, identifiquei uma falha de controle de acesso que permitia utilizar recursos exclusivos para…

Published: June 3, 2026

Exploring the Linux World

This week many people and organisations involved with cybersecurity travelled to the Excel in London to attend Infosecurity (InfoSec)…

You don’t need a six-figure SIEM to protect community data. You need the right basics, free tools, and people who care.

Executive Summary