A side project, a Linux desktop, and a small reminder that not everything you build has to be defending something.

What auditing real accounts taught me about the habit quietly wrecking our security and the ACSC breakdown that finally explains it simply.

There’s a quiet assumption baked into almost every web security scanner: you send a request, you get a response, you inspect the response…

Learn the fundamentals of SIEM and explore its features and functionality.

What’s up everyone! Nitin here 👋

This Boring Little Square Wants You to Scan It. If You Do, Your Passwords Are Gone. You scan QR codes without thinking — on menus, parking meters, and parcel slips. Attackers noticed. One scan can …

Introduction

Learn how to defeat logins and other authentication mechanisms to allow you access to unpermitted areas.

Platform: TryHackMe

Jack of All Trades — TryHackMe WriteUp with Flags Date: 02/02/2026 Room Link: https://tryhackme.com/room/jackofalltrades My Profile: https://tryhackme.com/p/RayenHafsawy 🧭 Introduction This room …

Understanding Web Stack Fingerprinting and Framework-Specific Exploitation

Artificial Intelligence (AI) is one of the fastest-growing technologies in the world. It powers applications like ChatGPT, virtual…

Researching the Netgear R7000 Firmware Update Flaw (CVE-2020–13245) In the world of hardware hacking, we often spend hours staring at microscopic traces on a PCB or struggling with UART pinouts …

A breakdown of hashing versus encryption for developers who store customer passwords, with working TypeScript examples using bcrypt…

This article is part of my Web Security Learning Series, where I document concepts and lessons learned while completing the PortSwigger Web…

“” is published by David SEHYEON Baek.

Cybersecurity has become one of the fastest-growing industries, and penetration testers are among the most sought-after professionals. As…

When people think about learning ethical hacking, one of the first assumptions is that you need expensive hardware, paid labs, or costly…

After setting up the academy machine, we run the “ip a” command to determine its IP address

CVE-2026–10112: Low-Severity XSS Flaw Found in Student Management System Dashboard

In the last article on 10th July, I tackled the juice-shop ‘forged feedback’ challenge. Feel free to check it out.