Yesterday, I attempted my first three CTF challenges on HTB. Here’s how they went ;)

On July 15, 2025, I asked Google’s Gemini AI to simply check and summarize my last email. What happened next was unexpected — and deeply…

👊 Welcome to the Dark Side of Wi-Fi — Ethically, of Course.

The internet seems like magic — you click a link, and a website loads instantly. But underneath that simplicity lies a powerful system of layers, rules, and services working together to make it…

The AI revolution’s next trillion dollars won’t be built on code alone. As five tech giants drive a 160% surge in data center energy demand, the resulting 45GW US power draw — enough for 34 million…

Security Starts at Home — But ON2IT Didn’t Get the Memo

I have over a decade of experience in cybersecurity, having started as a trainee back in 2013. I still remember the thrill of discovering…

Basics of the Assembly language

I tested prompt injection attacks on LLMs, failed to break through, but learned powerful lessons about AI security. Here’s what happened

This Article outlines the implementation of a multi-factor authentication (MFA) system with session locking and device trust features in a .NET application. The system enhances security by requiring…

A penetration tester’s perspective on why OWASP’s second release of their Top 10 for LLM apps is critical for developers and security teams.

Dorks for Juicy JSON Endpoints + Deep Recon

How a simple personalized feature can become a powerful backdoor into your server.

Hey hackers 👋 — this post is a fun deep dive into a critical authentication vulnerability I discovered during a recent security test. It combines one of my favorite web bugs (race condition) with a…

In 2016, Uber learned a brutal lesson when hackers used credential stuffing to breach employee accounts, exploiting reused passwords to…

The Hook: A $10,000 Find in Under an Hour

When a hacker pokes at a website or an app, every response from the server is a message. These messages aren’t always words — they come as…

A detailed guide to hacking the Harder machine on TryHackMe — Hidden domain, Git, web shells, Linux privilege escalation.

I managed to pass the Burp Suite Certified Practitioner exam the first time in just 60 minutes — with the first application taking me only…

The offensive security landscape is undergoing a seismic transformation with the emergence of Crossbow AI (Xbow AI), a platform engineered…

e porque o capitalismo digital está nos assaltando