Ağ güvenliği, siber saldırılara karşı korunma ve ağ trafiği yönetimi her geçen gün daha fazla önem kazanıyor. Bu bağlamda, ağ…

In this post, I walk through a real-world privilege escalation scenario involving a misconfigured sudo rule that allows the execution of a…

🔐 Introduction

A forensic analysis of a cyberattack exploiting DAO platform access to compromise crypto assets and exfiltrate sensitive credentials.

Let’s get real:  If passwords are your only defense against a breach, you’re not just underprepared — you’re practically inviting trouble.

Conceptual illustration showing how SSL misconfigurations expand the attack surface.

Step 1: Information Gathering in Meterpreter

Cybersecurity isn’t just about attacking — it’s about defending too. Blue Teams are the silent guardians who detect, analyze, and respond…

Ever trusted the internet to keep a secret?

What is Cache Poisoning? (Introduction)

In 2024, cybercrime complaints in India crossed an astounding 19.18 lakh cases, with financial losses amounting to over 22,811.95 crore…

Welcome to Part 2 of my APT simulation blog series. In Part 1, I introduced the lab architecture and explained the role of each system…

The scope of the Secure Image Policy encompasses all future development activities undertaken by the company, ensuring that all new…

Hi Folks, welcome back to another writeup. This time we are doing the Kioptrix: Level1 boot2root challenge. You can download the virtual…

Using Splunk to Investigate an incident started from the backdoor user creation to malicious PowerShell command decoding.

Hello there,

🔥 Introduction

first i checked my personal account on the website and noticed that i can upload any image as my PFP

I Found a Critical Info Leak Using Passive Recon — Got €324 in Return

Hey peeps, in this blog we will discuss about base-uri directive in CSP policy. As we all know, CSP policy is imposed by browser to accept…