Introduction

____________

Original Blog: https://sploited.blog/2025/07/11/iranian-apts-and-the-next-phase-of-infrastructure-risk/

Hola, me llamo ibra y esta es la primera investigación que hago en blue team labs, la hice hace unos meses pero me gustó mucho y explicaré…

This is a real walkthrough of how I successfully installed Kali Linux (XFCE) alongside Windows on my Dell laptop, using Ventoy and the…

In this blue team exercise alert was triggered with rule name SOC146 Phishing mail detected Excel 4.0 macros. If we look at the expanded…

Cyber threats are evolving everyday, meaning our approach against them must evolve too. There are couple of ways to better understand…

A critical remote code execution vulnerability in Wing FTP Server (CVE-2025–47812) is now being actively weaponized in the wild. Security…

In this article I will go through the retired Windows machine “EscapeTwo” from HackTheBox. The machine provides us with credentials at the…

Catch critical misconfigurations and vulnerabilities in your pull requests — without adding complexity for your developers.

Microsoft’s July 2025 Patch Tuesday represented a critical cybersecurity milestone, addressing an extensive array of vulnerabilities…

From discovering hidden pages to leaking API keys — a real-world playbook using target.com

As mobile app penetration testers, we often rely on Burp Suite to intercept HTTPS traffic from Android applications. However, as security…

Welcome back, scan-slingers! If Part 2 made you feel like a cyber-ninja, then Part 3 turns you into a full-blown cyber-wizard, armed with…

Scapy is one of the most powerful tools in a hacker’s arsenal. It’s not just a packet sniffer — it’s a full-blown framework that lets you forge, dissect, inject, and manipulate packets with surgical…

To understand how to write better reports, we first need to understand what triagers face daily. Find out true stories and insights.

AI is reshaping software development, enabling teams to generate and deploy code at a pace we’ve never seen before. But in this race to…

How to build secure software pipelines without slowing down delivery.

When I first set out to build a secure login system using Flask, I thought it’d be a quick weekend trip. Something clean, something cool —…

CRYPTOGRAPHY: HASHING

The Harsh Reality: You’re Not Too Small to Be a Target