The digital world is evolving fast — and so are the threats. From AI-driven phishing scams to cloud misconfigurations and…

Confused about pen tests vs. vuln assessments? This guide breaks it down so you can choose the right tool for your security needs.

Want to see how SafeLine WAF defends against the OWASP Top 10 without deploying it yourself? You’re in luck — SafeLine offers a live…

Conduct a live system analysis to uncover post-compromise activity related to persistence mechanisms.

Controlling how often someone can call your API helps prevent overload, but it’s just as important for stopping abuse and careless overuse…

A complete guide to solving the Cheese CTF on TryHackMe — from initial foothold with SQLi and LFI to full root via systemd service…

Introduction

____________

Original Blog: https://sploited.blog/2025/07/11/iranian-apts-and-the-next-phase-of-infrastructure-risk/

Hola, me llamo ibra y esta es la primera investigación que hago en blue team labs, la hice hace unos meses pero me gustó mucho y explicaré…

This is a real walkthrough of how I successfully installed Kali Linux (XFCE) alongside Windows on my Dell laptop, using Ventoy and the…

In this blue team exercise alert was triggered with rule name SOC146 Phishing mail detected Excel 4.0 macros. If we look at the expanded…

Cyber threats are evolving everyday, meaning our approach against them must evolve too. There are couple of ways to better understand…

A critical remote code execution vulnerability in Wing FTP Server (CVE-2025–47812) is now being actively weaponized in the wild. Security…

In this article I will go through the retired Windows machine “EscapeTwo” from HackTheBox. The machine provides us with credentials at the…

Catch critical misconfigurations and vulnerabilities in your pull requests — without adding complexity for your developers.

Microsoft’s July 2025 Patch Tuesday represented a critical cybersecurity milestone, addressing an extensive array of vulnerabilities…

From discovering hidden pages to leaking API keys — a real-world playbook using target.com

As mobile app penetration testers, we often rely on Burp Suite to intercept HTTPS traffic from Android applications. However, as security…

Welcome back, scan-slingers! If Part 2 made you feel like a cyber-ninja, then Part 3 turns you into a full-blown cyber-wizard, armed with…

Scapy is one of the most powerful tools in a hacker’s arsenal. It’s not just a packet sniffer — it’s a full-blown framework that lets you forge, dissect, inject, and manipulate packets with surgical…