Here. We will talk about a Bash script designed to secure Kubernetes clusters by applying CIS Benchmark security best practices. The script…

Often performing Pentesting, we detect crown jewels (access credentials) in the early stages of processes using OSINT, in the first few…

FTP (File Transfer Protocol) is a network protocol used to transfer files between a client and a server over a TCP/IP-based network like…

Learn about the critical security alert issued by CISA regarding the Contec CMS8000 backdoor vulnerability in patient monitors.

Introduction

With the advancement of technology, traditional web applications are being replaced by more modern web applications. The limitations of…

Tl;dr: Sometimes the bounty is hidden in plain sight — a simple IDOR by changing the Google Drive file ID. Blocked by login/pay wall? Read…

Cyber threats are more sophisticated than ever, and traditional security approaches can no longer keep up. Penetration Testing as a Service…

Introduction: A Random Discovery That Changed Everything

Summary

Face aux dynamiques de capture et de surveillance généralisées, il ne suffit plus de résister : il faut disparaître. De la subversion…

I was lucky enough to get a 5080 from Best Buy on launch day. Here are the hashcat benchmarks for the 5080 vs 5090. The 5080 was conducted…

In today’s security landscape, protecting sensitive information such as API keys, passwords, tokens, and other secrets is paramount.

Introduction

Failure Mode and Effects Analysis (FMEA) for Automated Anomaly Logging in Cyberintelligence Systems

You might think a private server keeps your data safe, but insider attacks and memory dumping are real threats. It‘s why you have to…

Investigating a suspicious XLSM file with VirusTotal

Today, I embarked on my cybersecurity bootcamp journey with TryHackMe, a fantastic platform that simulates real-world cybersecurity…

Salam. Bu write-up-da TryHackMe saytında olan “Smol” adlı CTF-in həllinə baxacağıq.

ThievingFox is a collection of post-exploitation tools to gather credentials from various password managers and Windows utilities

POSTDump is an another tool to perform minidump of LSASS process using few techniques to avoid detection.