A working methodology for finding bugs and writing exploits in browsers, hypervisors, and other hardened software, plus why the same system…

Recently, I identified and successfully validated an **XML External Entity (XXE)** vulnerability caused by an insecure XML parser…

https://tryhackme.com/room/foolsmate

This was quite a simple and straightforward room, honestly one of the calmer ones I’ve done lately.

How To Know If Your Husband or Wife Is Having an Affair

This was quite a simple and straightforward room, honestly one of the calmer ones I’ve done lately.

Scenario: You are tasked with looking at some suspicious network activity by your digital forensics team. The server has been taken out of…

Task 1 — Introduction

Task 1 — Introduction

https://app.hackthebox.com/machines/Reactor

Modules

Cybersecurity isn’t just about building stronger defenses. It’s about thinking like an attacker before a real attacker does.

A new security study reveals that nearly 64% of AI-powered iPhone apps expose API credentials or weak authentication, putting developers at…

Siber güvenlik dünyasında “en tehlikeli” zafiyetlerin başında gelen Remote Code Execution (RCE), bir saldırganın hedef sistem üzerinde…

This is a walkthrough of the portswigger lab: Blind SQL Injection With Conditional Errors.

A few weeks ago, I was testing a web application when I noticed something that looked interesting — a “.jpeg” file being loaded by the…

This is my writeup for Hidden in Plainsight, an Easy-rated Forensics challenge on PicoCTF.

🔍 Opening the Challenge

1. Introduction

Switch to QUERY http method Secure coding should always be the top priority for developers while building applications. Hence it was a welcome news when the HTTP QUERY Method was formally introduced …

Abstract