SQL Injection (SQLi) is a sophisticated technique where attackers exploit vulnerabilities in a system’s SQL queries. By manipulating these…

Pernahkah kamu membayangkan apa yang terjadi di balik layar saat sebuah serangan siber dilancarkan?

Introduction

Merhaba Siber Güvenlik Topluluğu! 👋

Learn how to ensure SQL Server high availability and disaster recovery with practical examples, diagrams, and expert insights. Protect your…

LeakIX is a platform dedicated to identifying and addressing security vulnerabilities and data leaks caused by misconfigurations in…

Launcher tool that is able to switch between all of the three firmware without a need of a computer, and even while on the go.

The Cheap Yellow Display (CYD) is a cost-effective development board that has captured the attention of the maker community. Featuring a 2.8-inch TFT touchscreen LCD and powered by an ESP32 microcontroller, this device is ideal for a variety of IoT and graphical…

ARP spoofing attacks are often used in combination with other types of attacks, such as DNS spoofing, SSL stripping, and more. These attacks can be used to steal sensitive information, launch phishing attacks.

ThreatFabric has identified a new cash-out tactic that wasn’t seen before called “Ghost Tap”, which cybercriminals use to exploit stolen credit card details linked to mobile payment services like Google Pay and Apple Pay. This method involves relaying NFC…

Scareware is a type of malicious advertisement designed to frighten users into believing their device is infected with a virus or has a critical issue. It typically manifests as a pop-up message or alert that mimics legitimate security warnings. The primary…

This blog is actually a video that explains how it is possible to locate Google and Apple smartphones legally by misusing device unique Advertising ID and stream of data collected by advertising plugins. These plugins are part of thousands of popular and…

Running Kali Linux on a Raspberry Pi Zero is a fantastic way to create a portable, powerful testing device. This guide will walk you through setting up Kali Linux Pi-Tail on a headless Raspberry Pi Zero 2 W that is powered and controlled from a smartphone…

WiFiPumpkin3 is a powerful framework designed for rogue access point attacks and network security testing. It allows security researchers, and red teamers to create fake Wi-Fi networks, custom captive portals, intercept traffic, and deploy phishing attacks.…

In previous series of blogs I focused on installation of Kali NetHunter on older model of TicWatch Pro 2018 (catfish) which might be for some of you a good choice if you already have them forgotten in your drawer or you can get them cheap to play around.…

Learn about the critical security vulnerability in iTerm2 and how it could have exposed sensitive user data. Stay informed and protect yourself.

Discover SysBumps, the first successful KASLR break attack targeting macOS systems on Apple Silicon processors. Find out how vulnerabilities in speculative execution can compromise kernel memory.

Discover the risks posed by the npm Supply Chain Attack on Ethereum developers. Find out how attackers targeted the Nomic Foundation's trusted tool, Hardhat.

Discover the flaw in Windows BitLocker that allows attackers to bypass encryption and access sensitive data. No screwdrivers or hardware hacking required.