At 16, I discovered CVE-2025–26206, a critical Cross-Site Request Forgery (CSRF) vulnerability that let attackers escalate privileges in…

In today’s digital landscape, web applications are constantly targeted by bots, scanners, and attackers.

Bu yazımdada, önceki yazımda bahsettiğim Adversarial Attack tekniklerinden Prompt Injection tekniğini daha ayrıntılı ve hands-on…

Hello Everyone Today we are solving the ctf named PIE TIME 2 for flag and aslo we’ll understand what we are learning with this .

👋 Who Am I?

Imagine being able to run root-level commands with a single echo.

The evolving landscape of Large Language Models (LLMs) necessitates a comprehensive understanding of their inherent risks, particularly…

Platform: Microsoft Azure
 Tools & Services: Azure Firewall, ARM templates, Azure Virtual Network, Route Tables, Application & Network…

This is a retired Hack The Box machine that is available with my VIP subscription. Since it is retired, this means I can share a writeup…

ETHERNET SWITCH IN ACTION: ARP and Spanning Tree Protocol (STP) EXPLAINED WITH LAB SIMULATION.

Introduction

‎Yes, it is possible to recover your money from Smartstp.

A data breach is a thing a user gain unauthorized access and retrieve sensitive, confidential, or protected information. This can include…

Learn what a passkey is, how it works, and why it’s safer than passwords. Discover how passkeys are changing how we sign in.

Securing Your n8n Instance on Hostinger: The Firewall Setup You Can’t Skip

Use your exploitation skills to bypass authentication mechanisms on a website and get RCE.

T1046: Network Service Scanning

In the world of Linux security, system administrators frequently encounter vulnerabilities that can be exploited to compromise the…

Tweets pay more than my cousin’s 9-to-5.

By Shah kaif | “One polluted prototype can compromise an entire application.” | LinkedIn