Discover networking artefacts using internal tooling on Windows

Perform a known-plaintext attack to recover a repeating-key XOR key and decrypt a hidden message.

In this write-up, I will walk you through how to solve a beginner-friendly CTF on TryHackMe called “Basic Pentesting.” I will give you a…

To learn how to structure and write a professional penetration testing report that effectively communicates technical findings to both…

TryHackMe room link: https://tryhackme.com/room/hfb1evilgptv2

Introduction

The Fluffy machine from Hack The Box is an Active Directory challenge that simulates a breach scenario starting from a regular user…

Being anonymous on the internet or while carrying out an attack is one of the most important characteristics of a hacker. There are several…

“Security is like insurance — useless until it’s not.”  This story proves just that. Buckle up, because I’m about to take you on a journey…

Uncover Exposed Information with HaveIBeenPwned, DeHashed, and Google Dorking

By Onyeagusi joseph Ekene| Ethical Hacker | Web Application Pentester | AI Security Researcher

The Squid Router in My Network: Navigating the Murky Waters of Router Ethics

I’ve recently been diving into Kubernetes pentesting and wanted to share some of the key things I’ve learned along the way. This guide is…

Web Application Firewalls (WAFs) like Cloudflare, Akamai, and AWS Shield are designed to block malicious traffic before it ever reaches a…

This lab is vulnerable to username enumeration and password brute-force attacks. It has an account with a predictable username and…

(A True Story of Ethical Hacking, Broken APIs, and a $5,000 Bug Bounty)

Kaito Yapper Payouts is a live crypto reward program that pays users every week in sKAITO tokens for their activity on X (Twitter). By…

SQL Injection is one of the oldest and most dangerous web application vulnerabilities. If you’re building Laravel applications, you’re in…

There’s a moment in every data engineer’s career when a single query reminds you just how powerful — and destructive — SQL can be. For me…

🐞 OTP Rate Limit Bypass via URL Obfuscation — A Critical Vulnerability📅 Reported on: June 16, 2025 ✍️ By: Raghav Arora 🔒 Severity: High A critical vulnerability was discovered in OTP delivery…

بِسْمِ اللهِ الرَّحْمٰنِ الرَّحِيْمِ