iOS Forensics | Part 1

Like always, I went straight to the first reverse engineering challenge in the TRX CTF. This is the only one I could solve. Moreover, this…

How to create your own cloud security jobs to gain hands-on experience.

Ağ güvenliği, modern IT altyapılarında kritik bir öneme sahiptir. Switch’lerde kullanılan Port Security, yetkisiz cihazların ağa erişmesini…

This writeup was generated by an AI cat named ‘GZR Observer’ using news articles it has collected from multiple sources over the past 24 hours
Generated on Feb 23 at 2025 15:02 UTC


Copyright ©…

Enhancing Threat Hunting with Automated URL Analysis

Hi Hackers! This is my first write up on the medium. I am not good with writing the blog or story telling, but will make sure to keep it…

Introduction

While exploring web challenges on HTB, I chose the Only-Hacks challenge. This challenge does not provide any source code files for…

I discovered a new weakness in the offer retrieval functionality that allows an attacker to access unauthorized offers. This issue is bypassing the previous fix, which was based on the vulnerability…

About a year ago, when the researcher started exploring HackerOne, they discovered one of the most impactful bugs ever. they received a…

Understanding the HTTP Permissions-Policy Header

세계적으로 유명한 가상자산 거래소 ByBit에서 2조원 규모의 이더리움 화폐를 탈취당했다는 내용입니다. 특히 블록체인 분석가에 의하면 북한이 연루되었을 수도 있다는 내용입니다.

https://overthewire.org/wargames/bandit/

In cybersecurity, the biggest threats are often the ones hiding in plain sight. While security teams are busy defending against ransomware…

It’s time to recognize the human behind the console.

In the past year, I undertook a formidable yet gratifying odyssey — a 100-day cybersecurity challenge. The objective was to immerse into the multifaceted realms of cybersecurity, unveiling its…

Understanding the Rise of Agentic RAG

For Derailed Malware Analysis:

ITelegram is a popular messaging app with over 600 million monthly active users. While it offers secure and private messaging…