Nine months, about 494 dollars, and a 189 page report. The full breakdown: TCM Security, eJPT, the HTB Academy path, the CPTS machine…

Understanding scan types, service detection, OS fingerprints, NSE, timing, and why the same host can look completely different depending on…

Nmap is much more than simply running a SYN scan and looking for open ports.

At a Glance Attribute Details Actor or Group UNK_Condor Filtration (unattributed cybercrime operator) Activity Type Password spraying, credential validation, cloud data exfiltration Targets or Vic…

Sandboxes exist because someone already knew this feature was dangerous. That’s what made this target interesting from the start — Solmark…

Purpose: Quick-reference methodology for advanced web application security testing. Scope: Use only against applications you are authorized…

A practical phishing investigation by Pentester Club

A true story of virtual machines, a near-disaster, and the terrifying world of malware analysis.

What “You Are Protected” Actually Means When Your Antivirus Is Still Warning You

A consolidated reference from my Web Security Academy series, covering how to spot this vulnerability class and every technique I used to…

A hands-on penetration-testing journey covering web enumeration, PCAP analysis, FTP credential discovery, SSH access, privilege escalation…

Bir önceki bölümde OT Server üzerinde Docker ortamını kurmuş ve Docker üzerinde FUXA SCADA’yı çalıştırmıştık.

Hunt registered DLL persistence in Windows registry extension points across an offline triage collection

Selamlar! Bu yazıda TryHackMe’de yer alan ve Cowboy Bebop anime temasıyla hazırlanmış popüler Linux makinelerinden biri olan Bounty…

Reflected XSS with encoding bypass

Researchers developed 5G-Shark to lure phones onto rogue base stations, collect subscriber IDs, force network downgrades and trigger service disruptions.

A new website or app can look ready before it ever goes live. The design is finished. The features work. The team has tested the main…

A simple cybersecurity concept, made less abstract

TL;DR The CERT Coordination Center published an advisory detailing multiple ViewSonic vCast vulnerabilities. These flaws allow unauthenticated attackers on a shared network to spy on screens and i…

In 2022, hacktivists claimed they had breached a Roscosmos ground segment; Roscosmos denied the incident. A peer-reviewed 2026 Journal of…