Author: Shikhali Jamalzade GitHub: alisalive · LinkedIn: camalzads

“Cyber Security Explained” is published by Maryam Nasir.

If you ask most people what a VPN does, you’ll get the same answer every time: “it changes your IP address.” That’s true, but it’s like…

Why business email compromise hits harder than ransomware, how one compromised inbox becomes your problem, and what I’ve seen working these…

Every day, millions of cyberattacks are launched across the world. While movies often portray hackers as highly skilled individuals…

Zero Trust versus Trust but Verify

Assets & Identities

It doesn’t need to be smart. It just needs permissions that nobody double-checked.

The FTP server was anonymous. The password was “secret”. The vim binary was sudo. This box didn’t hide anything, it just waited to see if…

The password was in robots.txt. The sudo was unrestricted. The box didn’t fight back, and that’s exactly the point.

An alarm tells you something happened. A camera tells you the whole story. You need both running at once.

Write-up — Enumeration to Root

Everyone learns web hacking. Very few people learn how to attack desktop applications. I wanted to change that.

A quick write-up on my eJPT attempt. Sharing how my eJPT exam went down, from the initial scanning to the pivot network.

Introduction

“A zero-day doesn’t wait for your next patch cycle. Neither should your response.”

“Map? Where we are going, we don’t need maps.” — Room tagline

This Position mate in A8 one move

For a student whose ambition was to become a doctor, she worked literally 24 hours a day to achieve her dream and finally ended up in the…

I highly recommend this room from TryHackMe as it teaches you basic SOC investigation skills and how to sift through event logs and find…