By Mohamed Gamal (gem0x00)

Welcome to the Simple CTF Walkthrough. The Simple CTF room on TryHackMe is a beginner-friendly challenge designed to introduce you to basic…

In the Couch machine, we explore a misconfigured CouchDB instance, access its admin interface, and leverage the exposed data to gain…

Business logic vulnerabilities (also called BLVs) happen when attackers use the API in a way that breaks the rules of the business — not…

Today, we’ll look at the mysterious, frequently incomprehensible, and thoroughly human world of Windows commands.
Humanity has struggled…

Imagine if every electronic device had a unique, unforgeable fingerprint that couldn’t be copied or stolen — even if hackers physically…

In a world where network continuity is essential and remote connectivity is increasingly becoming the norm, enterprises are constantly…

Imagine installing a browser extension to boost productivity — only to realize it’s quietly stealing your credentials, injecting ads, and…

In today’s software-driven world, the tools we use to build and deploy our applications are under constant assault. Your CI/CD server, the…

Click here to read more

Traditional code review processes, while essential, often struggle to keep pace with modern development cycles and the evolving landscape of cyber threats. Zero-day vulnerabilities — security flaws…

Imagine you maintain a dedicated Security VPC hosting monitoring tools (e.g., Wazuh, Suricata, ELK) and a separate Application VPC hosting…

Confidentiality, Integrity, and Availability (CIA Triad) Series

By Madison Forster

Advanced Static Analysis | Part 2

Mimicry is a security tool developed by Chaitin Technology for active deception in exploitation and post-exploitation.

Scan your Twilio account for misconfigurations and security risks like public functions, old API keys, and unencrypted webhooks—fast and easy.

ABB's ASPECT BMS has 32 security flaws, with some critical RCE and privilege escalation vulnerabilities having no planned fixes for legacy systems.

AI-generated TikTok videos are instructing users to run PowerShell commands, leading to the delivery of Vidar and StealC infostealer malware.

Malicious scripts disguised as Cloudflare human verification are embedded in WordPress themes, tricking users into executing PowerShell commands that deliver malware.

Hi everyone, hope you are having a great time. I recently attended SINCON Singapore 2025 and had an amazing time catching up with the cyber…