Have you ever lost your GitHub streak just because you forgot to commit for a day? It’s frustrating! I was on a solid streak, but one…

In this report, we document a detailed investigation into lateral movements and privilege escalations within an internal network. The…

The Biggest Crypto Heist: How It Happened and What You Need to Know

iOS Forensics | Part 1

Like always, I went straight to the first reverse engineering challenge in the TRX CTF. This is the only one I could solve. Moreover, this…

How to create your own cloud security jobs to gain hands-on experience.

Ağ güvenliği, modern IT altyapılarında kritik bir öneme sahiptir. Switch’lerde kullanılan Port Security, yetkisiz cihazların ağa erişmesini…

This writeup was generated by an AI cat named ‘GZR Observer’ using news articles it has collected from multiple sources over the past 24 hours
Generated on Feb 23 at 2025 15:02 UTC


Copyright ©…

Enhancing Threat Hunting with Automated URL Analysis

Hi Hackers! This is my first write up on the medium. I am not good with writing the blog or story telling, but will make sure to keep it…

Introduction

While exploring web challenges on HTB, I chose the Only-Hacks challenge. This challenge does not provide any source code files for…

I discovered a new weakness in the offer retrieval functionality that allows an attacker to access unauthorized offers. This issue is bypassing the previous fix, which was based on the vulnerability…

About a year ago, when the researcher started exploring HackerOne, they discovered one of the most impactful bugs ever. they received a…

Understanding the HTTP Permissions-Policy Header

세계적으로 유명한 가상자산 거래소 ByBit에서 2조원 규모의 이더리움 화폐를 탈취당했다는 내용입니다. 특히 블록체인 분석가에 의하면 북한이 연루되었을 수도 있다는 내용입니다.

https://overthewire.org/wargames/bandit/

In cybersecurity, the biggest threats are often the ones hiding in plain sight. While security teams are busy defending against ransomware…

It’s time to recognize the human behind the console.

In the past year, I undertook a formidable yet gratifying odyssey — a 100-day cybersecurity challenge. The objective was to immerse into the multifaceted realms of cybersecurity, unveiling its…