Hey everyone,

Dalam ekosistem aplikasi modern, khususnya yang mengadopsi arsitektur microservices dan cloud-native, aplikasi tidak lagi berdiri sendiri…

Dalam pengujian keamanan aplikasi web, salah satu kategori vulnerability yang cukup sering ditemukan terutama pada aplikasi berbasis…

No CTF is Gonna Teach You this in 1 Afternoon!

Recent npm and symlink attacks show how AI development tools are turning ordinary workspaces into supply-chain attack surfaces.

How to break into cybersecurity in 2026, The honest first rung and what to learn.

The term bn6922297r is an alphanumeric identifier that often appears on Samsung TVs, online advertisements, or technical documentation. At…

Platform: TryHackMe

Impact — Critical

One accented letter in a domain name was all it took. I could log into someone else’s account, then quietly have their password-reset link…

Hii hunters Cyb3r_Rs is here with one more informative & knowledgeable Article. I hope you find this helpful.
This is 2nd part of my last…

Every web application has users, but not every user should have the same level of access.

A broken OAuth flow on IITM’s student portals let any student take over another’s account using just their own email. No tools. No tricks.

Most people think phishing is obvious. “I’d never fall for that,” they say. Then they click the link anyway.

Secure Your Server: Forcing 2FA on SSH Connections

What if I told you that the password you type during login is never actually compared with the one stored on the server?

Today we are going to solve the “ DC-1”

Room Information

(A Beginner’s Guide to Searching Logs with Splunk)