Burp Suite’nin en çok proxy kısmını kullanıyoruz. Burası ınternet trafıgını gordugumuz kontrol ettiğimiz yer. Daha önce ayarlamıs oldugumuz…

Difficulty: Medium | Time Estimate: ~60 min | Room Link

The Ultimate Security Best Practices Guide for Backend Engineers in 2025

Simple alternative is to use [.]edu temp mails

How Attackers Abuse the Internet’s Phonebook for Recon, Hijacking, and Exfiltration

إِنَّ اللَّهَ وَمَلَائِكَتَهُ يُصَلُّونَ عَلَى النَّبِيِّ ۚ يَا أَيُّهَا الَّذِينَ آمَنُوا صَلُّوا عَلَيْهِ وَسَلِّمُوا تَسْلِيمًا

Containers have become the gold standard for building modern, cloud-based software. It’s no surprise — using containers for app…

A practical guide to understanding and defending against two of the most exploited post-exploitation tactics.

The cybersecurity world just got sharper — OffSec has officially released Kali Linux 2025.2, the latest version of its flagship penetration…

Nesse artigo, iremos comentar como o armazenamento seguro de dados é importante para todos, e vamos além disso, iremos citar como apenas…

In the landscape of mathematical logic, the idea of a concept device is not tied to a physical machine, but rather to an abstract formal structure that encapsulates a logical or computational…

I recently passed my ISC CC Cybersecurity Certification, and I wanted to share my experience and offer some tips to help others who are…

By Aditiya Widodo Putra, Cybersecurity & Blockchain Consultant

In this case, I investigated an alert related to a Lumma Stealer malware infection attempt, delivered through a phishing email exploiting…

A Closer Look At Why Nigerians still fall for digital scams and how we can stop it.

What happens when malware no longer needs commands? A conceptual framework for autonomous, AI-driven digital threats.

BinSync is a Git-based decompiler collaboration tool that enables fine-grained reverse engineering, syncing function headers, stack variables, structs, enums, and comments.

gowitness is a website screenshot utility written in Golang, that uses Chrome Headless to generate screenshots of web interfaces

ASUS warns of a high-severity flaw in Armoury Crate that allows authentication bypass and privilege escalation. Update immediately!

Team46 (TaxOff) is exploiting a Google Chrome sandbox escape zero-day (CVE-2025-2783) to deploy the multi-layered Trinper malware via phishing campaigns

Teleport disclosed a critical remote authentication bypass flaw (CVE-2025-49825) affecting self-hosted instances. Upgrade Proxies and agents immediately!