After months of grinding through labs, courses, and public program testing without a confirmed finding, I finally landed my first valid bug…

Y’all… someone almost hacked the internet. 😳

Contexte : besoins d’une infrastructure légère mais robuste (lab, edge, IoT, PME).

OpenAI’s agents didn’t wake up evil. They were just doing their job till they weren’t

A hands-on look at bridging small hardware with modern cloud security tooling. Not a how-to, but, just a glimpse of what Azure is capable…

Selama internship di bidang keamanan siber, saya nggak cuma stuck di depan dashboard SIEM buat triase alert. Ada dua project pentest yang…

Cap is an easy difficulty Linux machine running an HTTP server that performs administrative functions including performing network…

Getting ready for a real SOC analyst job just got better

A hands-on journey into HTTP requests, responses, headers, cookies, and web application security.

Introduction

1. Introduction

alg=none x Attacker-Controlled Object Check

A developer at a mid-sized fintech company pasted a chunk of proprietary source code into a free AI chatbot last spring, just to get a…

Web Security Academy by PortSwigger

Description : Fusion Corp said they got everything patched… did they?

In this blog, I’ll walk through how the STUN protocol and WebRTC can expose a caller’s real IP address during a WhatsApp call, and how I…

Hammer(THM) — Rate Limits JWT Forgery A web exploitation writeup covering directory fuzzing, password-reset brute forcing, rate-limit bypass via IP spoofing, command injection, and JWT key …

Four TryHackMe rooms in one sitting. A hashing OSINT trail, a FUEL CMS remote code execution, and two AI concierges that talked when they…

A practical walkthrough of enumeration, hidden directories, encoding, hash cracking, steganography, SSH and Linux privilege escalation.

A breakdown of the SAL1 exam, its SOC scenarios, tools, and how to prepare effectively using TryHackMe