nmap ile port taraması gerçekleştirdim

Analyse network traffic related to an unauthenticated file share access attempt, focusing on potential signs of data exfiltration.

Legacy is a machine that challenges the ability to penetrate legacy systems and handle various exploitation techniques. Throughout the…

In the Blue machine, we exploit the well-known EternalBlue vulnerability (MS17–010) in Windows systems to gain remote access. The machine…

As the modern enterprise races toward automation and AI, a new digital frontier is rapidly expanding — one defined not by human users, but…

What is SQL injection to Retrieving multiple values within a single column

What is SQL Injection? Impact & Type of SQL Injection and Prevention of SQL Injection.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Yesterday, I attempted my first three CTF challenges on HTB. Here’s how they went ;)

On July 15, 2025, I asked Google’s Gemini AI to simply check and summarize my last email. What happened next was unexpected — and deeply…

👊 Welcome to the Dark Side of Wi-Fi — Ethically, of Course.

The internet seems like magic — you click a link, and a website loads instantly. But underneath that simplicity lies a powerful system of layers, rules, and services working together to make it…

The AI revolution’s next trillion dollars won’t be built on code alone. As five tech giants drive a 160% surge in data center energy demand, the resulting 45GW US power draw — enough for 34 million…

Security Starts at Home — But ON2IT Didn’t Get the Memo

I have over a decade of experience in cybersecurity, having started as a trainee back in 2013. I still remember the thrill of discovering…

Basics of the Assembly language

I tested prompt injection attacks on LLMs, failed to break through, but learned powerful lessons about AI security. Here’s what happened

This Article outlines the implementation of a multi-factor authentication (MFA) system with session locking and device trust features in a .NET application. The system enhances security by requiring…

A penetration tester’s perspective on why OWASP’s second release of their Top 10 for LLM apps is critical for developers and security teams.

Dorks for Juicy JSON Endpoints + Deep Recon