Di era digital yang semakin terdesentralisasi, keamanan adalah kunci. Dua pilar utama yang menopang fondasi keamanan ini adalah Elliptic…

How I Turned My Passion Into Global Recognition :

Last week, I played one of the most fun and practical Capture the Flag (CTF) activities I’ve done so far, and I didn’t even need Kali…

Hello everyone! This is a beginner-friendly room from the TryHackMe platform titled “Agent T”

As cars get smarter, your data becomes the fuel. But at what cost?

In the fast-moving world of online commerce, where trust is the true currency, even the faintest hint of a data breach can send shockwaves…

Write-up for TryHackME’s Search Skills room

Advanced Recon Techniques for Cybersecurity Asset Discovery and Vulnerability Detection

In an industry moving at breakneck speed, Elon Musk’s Grok AI has emerged as both a disruptor and a lightning rod.

How a Forged SAML Response Gave Admin Access Without a Password

How SaaS integrations, expired services, and overlooked DNS records are expanding the attack surface

When Servers Overshare: Sniping Apache Struts with a Simple String Injection

I almost quit bug hunting until I tried Shodan Dorking — this is how I uncovered 50+ CVEs faster than ordering coffee.

Yooo, wsgg

Discover how changing IDs in filenames reveals other users’ files…

Are you staring at HackerOne or Bugcrowd dashboards wondering when you’ll finally find your first bug? 😩

Real Attacks, Big Damage, and How to Stop Them

Comprehensive Web Application Testing Guide

This bug was found during a private program on a platform that provides per-user storage quotas.

Cyber never sleeps and neither do threat actors.

Pendahuluan