Part 0 of the LedgerLite series: one small banking app on Google Cloud, every security fundamental that matters, and an AI assistant at the…

OffSec lab write-up covering virtual-host discovery, exposed Git history, and privilege escalation.

Over 50 intentional vulnerabilities across the OWASP Top 10 and the OWASP LLM Top 10. Here’s what Pwnshop is and how to get it running with…

Introduction

Description : Test your enumeration skills on this boot-to-root machine.

Technical Background

Relational understanding boundaries and the coordination of human and artificial intelligence

As part of my ongoing practice as a SOC L1 trainee, I regularly do passive reconnaissance on publicly accessible websites — not to exploit…

Exploring how AI-powered vulnerability discovery could help secure open-source software — and why human verification still matters.

It was late December 2015, and western Ukraine was locked in the grip of a brutal, freezing winter. Inside the secure control room of a…

How a vulnerability scan and a penetration test differ, when you need each, and how to spot a scan being sold at test prices

A hands-on cybersecurity assessment covering vulnerability discovery, exploitation evidence, risk analysis, and remediation in an…

A return to authentication after a run through command injection, and a lab that breaks two-factor verification without ever touching a…

My practical learning notes from PortSwigger Web Security Academy

Scenario :You have been presented with the opportunity to work as a junior DFIR consultant for a big consultancy. However, they have…

Imagine you're working your first SOC shift. An alert appears on your SIEM dashboard. Multiple failed login attempts, a suspicious…

You enter one username with Sherlock and with Whatsmyname. Both tools returns multiple accounts across the Internet. But, did you…

Local File Inclusion (LFI) filters often block ../ patterns—but double encoding can slip right past them. This payload uses %252e…

How missing rate limits can turn an ordinary AI chat feature into a resource-consumption risk.

An investigation by Indicator author and renowned journalist Craig Silverman found that a Bangladeshi government employee-freelancer was…

CTF Lab Description