Hello, In this article, we will discuss the fundamentals of risk management, including risk analysis in information security. We will…

Protect Your Wallet: Remove Fake Phishing Token Approvals on Etherscan

In February 2025, I completed my eJPT certification after realizing that my voucher was expiring soon. It took me about 20 days of learning…

As a BCA student, you are constantly working with technology — coding software, developing applications, and managing databases. However…

I completed the rest two exercises in the wireless access exploitation module in NCL Gym. The second one was similar as the first module…

Okay I really need to take a breath on this one before I start. Because what I just learned about browser extensions has me shook. SquareX’s research team just dropped a bombshell about a new threat…

From high-profile data breaches to emerging vulnerabilities, this week’s newsletter delves into the cybersecurity landscape, giving you the knowledge to stay informed and vigilant. Broadcom has…

We are given a packet capture file (shark2.pcapng) and need to extract a flag from it.

Penetration Testing atau pentest adalah proses simulasi serangan siber yang dilakukan untuk mengidentifikasi dan mengevaluasi celah…

Server-side vulnerabilities are security weaknesses in a server’s configuration, code, or underlying infrastructure that attackers can…

In this article, we’ll cover where to find PII exposures, how they escalate impact, and why context matters. Real-world examples inside.

In this blog, I will discuss how to utilize Client Side Path Traversal, to achieve classic client side attacks such as XSS & CSRF in Client Side Rending Based Web Applications such (React, Vue…

Imagine taking over any account without user interaction — just pure exploitation! Join me on this thrilling journey of a zero-click hack!

POC of the report submitted for OTP Bypass bug

AI-driven chatbots are revolutionizing customer service, automating workflows, and enhancing user experiences. But with great convenience…

Hacking isn’t always about sophisticated code or elite technical skills — it’s about people. Cybercriminals don’t always need to bypass…

My Cybersecurity Journey

Not All Revolutions Announce Themselves

👨‍💻 Ever worried about unauthorized access to your servers?

The subtle art of getting fuc**d digitally!!