Discover Hidden Endpoints, Secrets, and API Clues From JS Files Automatically

We have recently seen several articles promoting passkeys as the long-awaited replacement for passwords.

It started with a single keystroke.

1. Have I Been Pwned (HIBP)

In today’s evolving digital landscape, securing information is no longer optional — it’s critical. Organizations looking to formalize…

By Rankiteo Team — April 2025

In the modern business world, reliable wireless connectivity is no longer optional — it’s essential. Enterprises need robust, secure, and…

My SIEM-Agnostic Creative Process to Detection Engineering

Bu yazıda, LetsDefend platformunda bulunan Port Scan Activity adlı challenge’ı çözeceğiz.

While AI’s offensive capabilities in misinformation and automation have taken center stage, its potential for long-term logical path…

Absolute monster. One of the greatest machines out there on the platform. The machine consists of RID search, AS-REP Roasting…

Cobaltstrike UDRL for beacon and post-ex tools. Use NtApi call with synthetic stackframe to confuse EDR based on stackframe detection.

A collection of tools to perform research into how humans generate passwords. These can be used to crack password hashes

Sherloq is a personal research project about implementing a fully integrated environment for digital image forensic.

Microsoft reports active exploitation of a Windows CLFS zero-day (CVE-2025-29824) to escalate privileges and deploy ransomware. Learn about the attacks, the threat actors involved, and how to mitigate the risk.

Siemens ProductCERT issued a security advisory detailing critical vulnerabilities in the SENTRON 7KT PAC1260 Data Manager. The flaws could allow remote attackers to execute code, bypass authentication, and more.

A vulnerability (CVE-2024-12556) in Kibana allows code injection via prototype pollution, file upload, and path traversal. Upgrade to the latest version or disable the integration assistant to mitigate this high-severity security risk.

CYFIRMA researchers discovered Neptune RAT, an advanced Remote Access Trojan targeting Windows. Learn about its destructive features, evasion techniques, and distribution methods.

The latest Chrome update addresses a high-severity "use after free" vulnerability in Site Isolation (CVE-2025-3066). Learn about the security risk and the importance of updating your Chrome browser

Attackers are using "Rogue RDP" techniques, abusing RemoteApp and resource redirection to steal files and conduct espionage