Author: Shikhali Jamalzade GitHub: github.com/alisalive LinkedIn: linkedin.com/in/camalzads

If you’ve visited my LinkedIn profile, you may have noticed a gap in my cybersecurity journey. That gap was due to my mandatory military…

Description : Server trouble in Bedrock.

I Opened a "Clean" File in Detect It Easy. In 60 Seconds, I Knew It Was Malware. How to spot packed, obfuscated Windows malware without running it, using the "Golden Nuggets" of PE Headers. --- The …

Nmap is a free and open-source network scanning tool that helps find live devices, open ports, and services on a network. It is widely…

The Boredom of a 15-Year-Old in a Digital Desert:

The final part of my CICD-Goat pentest: command injection, poisoned artefacts, malicious packages, and secrets crossing multiple pipelines

Most pentesters jump straight into BloodHound and Impacket. Here’s the foundation they’re missing , explained with a school analogy that…

Learn web app pentesting by chaining vulnerabilities from recon to full server compromise.

Olympus — TryHackMe WriteUp with Flags Date: 16/06/2026 Room Link: https://tryhackme.com/room/olympusroom My Profile: https://tryhackme.com/p/RayenHafsawy 🧭 Introduction In this room, I chained …

Platform: TryHackMe

Introduction

{وَأَنْ لَيْسَ لِلْإِنْسَانِ إِلَّا مَا سَعَىٰ ۝ وَأَنَّ سَعْيَهُ سَوْفَ يُرَىٰ}

A field guide to how bug bounty hunters and penetration testers map an attack surface — from finding an organization’s ASN all the way to…

Professional bug bounty style write-up demonstrating SQL Injection exploitation through the category parameter using the payload ‘ OR 1=1 —…

Part of my Cybersecurity Learning Journey on TryHackMe — Cyber 101 Path

#6:

Introduction

Most people think Google is just a search engine.

Goal: Get the database to return a specific string (’VLEbGK’) in the page output, identifying which column accepts string data.