A practical walkthrough of catching packed malware in the act, without having to reverse every last instruction.

Giriş

Giriş

Detection engineers often face a common challenge:

What’s the idea?

PicoCTF—SQLiLite: Web Exploitation (Medium difficulty, 300 pts)

Spoiler / TL;DR: In June 2023, a small satellite named Moonlighter was launched into Earth orbit aboard a SpaceX rocket — and its sole…

What Happens When You Visit an HTTPS Website?

Hello! I am currently working toward my SAL1 certification and plan to write up the 12 CTFs featured in the course, as well as the two SOC…

Intro

An anonymous attacker could fully enumerate, read, and overwrite the production customer-service attachment bucket of a major insurer’s…

In the realm of web application security, Insecure Direct Object Reference (IDOR) stands out as a critical vulnerability that often goes…

Did you know that the average time a person spends online has doubled since 2014, while the complexity of digital attacks has grown by…

Most of the internet still runs on decades-old assumptions about trust, patching, and physical isolation. That gap — not raw talent — is…

This is the thirrd room of the Wireshark phase of my using TryHackMe rooms to train my SOC brain by understanding through practice how to…

Hassan Elsayed

The part that made my coffee sit up straight was not the alleged AI jailbreak. We have been promised rogue robots for so long that my brain now files it next to flying cars, office nap pods, and …

Image: Federico Abis / Pexels

Every major milestone starts with a simple, clear plan. Today marks Day 0 of my Bug Bounty journey. The ultimate target is to earn my first…

TryHackMe Writeup Covering SMB, Telnet, FTP and Networking Concepts