Insanların kurulum yaparken gereklı guvenlık onlemlerını ya da ayarlarını yapmamaları. Directory listleri kapatmamak. Hata mesajlarında cok…

Devoloperların kendilerine eklemiş oldukları kısayollar gibi ögeleri kendimiz için kullanıyoruz.

In this blog, I’ll break down common web application attacks and explain how to effectively detect and identify them.

If you know yourself well, it becomes easier to guard your identity. You should do this by carefully considering your values, skills, boundaries and ambitions. We should take time to ask ourselves…

Kelime anlamı olarak enjekte etmek demektır. Hedef sistemlere istediğimiz seyleri yüklemekten ibarettir. Sadece SQL Injection yoktur…

Last week, I visited a smart factory in Bangalore where Anil, the operations manager, showed me a robot arm syncing perfectly with a cloud…

Erişim yetkilerinin düzgün ayarlanmaması sonucunda olur. Örnek olarak bir Web sayfasında kullanıcıların kendı kullanıcı yetkılerı dısında…

Photo by Markus Spiske on Unsplash

Tag along and let’s ace the Jr Penetration Tester (TryHackMe) pathway together

In this guide, we’ll dive into a clever and elegant challenge that demonstrates how an innocent-looking feature like converting Markdown…

I recently started using TryHackMe, a free and interactive platform that offers beginner to intermediate resources in cybersecurity. It’s a…

When we think of cybersecurity, what usually comes to mind are antivirus programs, the benefits of using strong passwords, and avoiding…

Potential for Phishing via Redirect URI Manipulation

Halli: I don’t remember how this started. Not exactly. It wasn’t a “Hello World” moment. No dramatic boot-up sequence. Just… this growing…

This year’s NCCDC was an absolute blast. I’ve done a lot of red teaming, but this one was special because I finally got to field test…

⚠️ Months of Silent Infection: Procolored’s Malware-Laced Drivers

Recently, the Blockchain Security Standards Council (BSSC) introduced its inaugural security framework to standardize how blockchain…

Hi, my fellow hackers. This is Rayofhope. I have over 5 years of experience and am currently working as a consultant with a Big 4 firm.

🚨 Disclaimer: This article is for educational purposes only. Please do not use these skills to perform unauthorized attacks. Always get…

I. Introduction – The Weakest Link in the Digital World

Why Third-Party Cyber Risk Deserves a Starring Role in Your Security Strategy