At a Glance Attribute Detail Malware family DOUBLECUP (Loader-as-a-Service); payloads CountLoader 4.5p and DeviceManager RAT Threat actor Rognar, a Russian operator (confirmed by SOCRadar) Target …

Learn how I use waymore to uncover hidden and historical URLs, configure VirusTotal and URLScan APIs, and improve my bug bounty…

A critical 10.0 CVSS bug in Ruflo's MCP bridge let attackers gain full shell access with zero login. Here's what every AI builder needs to know.

Summer’s winding down and millions of people are flying home after weeks abroad. Airports are packed, roaming is heavily used, and phones…

A digital forensics case study — how a fake “purchase order” almost bypassed Windows’ last line of defense

A beginner-friendly lab for learning firewall rules, NAT, port forwarding, Nmap reconnaissance, SSH brute-force detection, logging, and…

Active Directory From Zero to Hero — Part 5

How a critical Bricks Builder vulnerability led from a single unauthenticated request to a cryptocurrency miner tied to the LockBit…

A Practical Security Assessment of OWASP crAPI: Identifying and Exploiting API Security Vulnerabilities

This blog is completely dedicated to the MBR & GPT Analysis, but before diving in the analysis it is important to understand the MBR & GPT…

Phishing is More Than Spam

How much of AI can we actually know and how its security gonna be affected?

Weighing the career benefits against the mental toll of doom-scrolling

TL;DR Two Accenture researchers showed that plugging a USB device into Windows can hand an attacker SYSTEM. The chain needs no admin rights and no logged-in user. Both the vulnerability details an…

A beginner-friendly, practical walkthrough of how NoSQL injection works, why it’s often overlooked, and how to actually test for it.

Bug bounty hunting is often described as a process of finding vulnerabilities.

Part 5 of our Android security series. Part 4 covered Secure Logging — this post covers the other half of CRYPTO: where your encryption…

Assume someone hostile is paying attention.

While the OWASP Top 10 serves as an industry benchmark for web security, restricting application security testing solely to OWASP risks…

During a pentest I found a JavaScript file that led to me an API with exposed Swagger. Once account creation later I was an Admin.

This guide covers the exploitation of the Infinity Pool room. The process involves command injection, credential discovery, and privilege…