After my semester exams were over, I decided to select a target and hunt on it.

You ever get kicked out of somewhere but the door takes 10 minutes to actually lock?

Whether you’re diving into bug bounty hunting, preparing for web application penetration testing, or just curious about ethical hacking…

Recon tool for pentesters and bug bounty hunters

Hello everyone! I’m Omar Mohamed, also known as 0xnanashi.
In this post, I’ll talk about a Vulnerability I have found that allows me to…

Discover how FFUF boosts your cybersecurity arsenal. Essential fuzzing guide for pen testers and bug hunters.

Hello everyone! I’m Omar Mohamed, also known as 0xnanashi.
 In this post, I’ll walk you through a sneaky Race Condition vulnerability I…

Identity access management (IAM) systems today are built for humans: sessions, passwords, MFA prompts, login pages. Agents break that…

Imagine a bouncer at a VIP club. He has a guest list, and if your name isn’t on it — it doesn’t matter how confidently you walk up —…

One wants to be your crypto-savvy freedom fighter. The other is a nonprofit darling with a Google sugar daddy. Both claim to care about…

“We’ve invested in firewalls, antivirus, and endpoint detection. We’re safe.”Nope. Not if Khushal from HR clicks on a phishing link.

A walkthrough of the Active Directory machine “Trusted” on Vulnlab

I’ll walk you through the challenge step by step, breaking down key concepts and important takeaways along the way. After starting the machine, we begin with a basic Nmap scan using the -sV option to…

Recently I had a close call with a scam at a metro station in Hyderabad. 
A person approached me asking for help to make a call, initially…

Once an attacker gains initial access to a system whether through phishing, vulnerability exploitation, or stolen credentials the next step…

The emergence of cryptocurrencies has revolutionized the financial landscape, yet it has also given rise to significant challenges…

Integrations

Introduction

Using Gemini for automated vulnerability scanning

Sometime lazy recon & manual testing matters

Active Directory (AD) is a system that manages user accounts and permissions in an organization’s network. Attackers can impersonate users…