Day 6 was mostly about wrapping up the reconnaissance phase and cleaning up the attack surface.

Introduction

You add this while debugging:

Earlier, Microsoft released its routine September update. Unfortunately, it caused severe disruptions with cell copy-pasting and formula calculations in Microsoft Excel. Consequently, the company …

Then I started realizing that the tools were only the beginning.

Introduction

Build your path from beginner to pro, set a meaningful goal for your life, and develop the skills to pursue it — one focused step at a…

Today, I analyzed a suspicious phishing email containing a malicious PDF file inside a sandbox. At first glance, it looked like a normal…

The Complete Guide to Reconnaissance: From Passive OSINT to Active Enumeration

A deep dive into the psychological tactics behind the Netflix thriller and practical steps to protect your lost or stolen device

If you’ve spent any time in the world of Linux privilege escalation — whether through CTFs, OSCP-style labs, or real-world penetration…

Cyber security is becoming an important part of every modern organization. As cyber threats continue to increase, companies need…

The payload already works. Everything that matters now is delivery — CSRF on the write, login CSRF, cookie tossing, jar overflow, and the…

The platforms have data. The data says the easy money is gone.

I remember one of my early recon sessions.

Exposed API keys, database credentials, and misconfigured environment settings are among the most frequent entry points for security…

Mass Authentication Bypass in Open edX Allows Anonymous Data Dump of Content Across 63 Courses- Severity: High (CVSS 7.5) CWE-862 Broken…

AI agents are removing the skill barrier to hacking. I’m not sure we’re ready.

Gestione degli Indicatori di Compromissione (IoC) e analisi degli hash per la difesa perimetrale in ambito SOC.

With cyber threats becoming more advanced every year, organizations are investing heavily in cybersecurity professionals who can identify…