Part 1 of a Technical Series on Building Security Tools from Scratch Author: Agniswar Mukherjee

Difficulty Levels Covered: Low | Medium | High Vulnerability Class: CWE-307 — Improper Restriction of Excessive Authentication Attempts…

After learning HTTP, Routing, Authentication, Databases, Caching, Task Queues, Scaling, and Observability, I finally reached what is…

Microsoft details GigaWiper, a destructive Windows backdoor that can wipe disks, encrypt files and give attackers remote access to compromised systems globally.

Welcome to this new Medium post! In this one, we’ll explore two classic techniques used to reduce the entropy of a binary, helping it…

In this walkthrough, I will solve the RootMe room on TryHackMe.

How I merged Semgrep, Nuclei, and an AI exploit agent into one pipeline — and the architecture decisions that made it work

What happens when you fuse static analysis, taint tracking, and agentic AI into a vulnerability scanner — and point it at the Python AI…

Let’s get something straight right out of the gate. If your idea of a red team engagement involves firing up a cracked version of a…

Assess and mitigate enterprise AI/ML risks via systematic, defender-focused auditing.

Introdução

OverTheWire Natas Level 5 → Level 6

There is a running joke in the Linux community that refuses to die: the insufferable nerd who enters an unrelated conversation just to drop…

How I exploited an AI assistant using prompt injection and what it reveals about real-world LLM vulnerabilities

Shadow Trace TryHackMe Walkthrough

AI is increasing the speed, scale, and complexity of vulnerability discovery. Attackers can now use AI to identify weaknesses, create…

I joined the cult of BLACK ARCH LINUX! So I’ve been trying to see what makes this distro so special, and now I see why!! I don’t know why I didn’t make the change sooner. I do want to play …

Misinformation spreads fast. But what if the correction found its way back to you?

In late June 2026, Cardano users woke up to a nightmare that didn’t involve a classic exploit, bridge hack, or phishing campaign. No smart…