How a simple social engineering attack bypassed a national telecom’s entire security perimeter, and the architectural failures that allowed…

At first, I have discovered the IP address of the target machine using netdiscover.
192.168.56.118 is the IP address of the target machine.

From FFUF to FeroxBuster. A complete, no-nonsense guide to setting up your offensive security environment for high-speed web application…

Hey friends! Nitin here 👋

Brute-forcing is trying every key on the keyring. Fuzzing is throwing a rubber duck at the door to see if the hinges break. Here is how…

Here is the vulnerable Active Directory lab that I walkthrough, and here is the attacks that it covers:

Not all hackers are criminals. In fact, many hackers play a vital role in protecting businesses, governments, and individuals from cyber…

I recently solved the Mr Robot CTF room on TryHackMe. The room is rated medium, but what I liked about it is that it connects a lot of…

I usually think of cybersecurity in terms of servers, logs, firewalls, and threat actors.

The Linux server looked healthy.

Keep it real and forget the hard sell faff.

Business Continuity Plan

Junior Security Analyst Intro

DISCLAIMER: The techniques demonstrated in this write-up are intended solely for educational purposes. Please ensure that any testing is…

Date: 19/08/2025

1- Think like a Defender

How Internet works & Windows OS & File System

A changelog widget’s HTML sanitizer strips every XSS vector you can name — and then hands you a full-page iframe on its own trusted domain…

A critical account-takeover bug on a European bike-share platform, a four-line forgery script, and the cruelest word in all of bug bounty…

A practical walkthrough of the most common JWT vulnerabilities, based on what I learned from PortSwigger’s Web Security Academy