In an increasingly interconnected world, safeguarding our digital assets has become an indispensable aspect of personal and organizational…

Step 1: Setting Up the Environment and Discovering the Target IP Address

Okey so we will continue with the labs, in this one we want to retrieve the users table in order to see the username and password of the…

New malicious NPM packages disguised as WhatsApp libraries are destroying developers' code by deleting all files in their current directory.

Technical skill is the foundation of penetration testing. Without it, you can’t even begin. But skill alone doesn’t make a pentester…

How tiny, copycat modules are evolving into a cross-platform supply-chain nightmare

Machine Overview: Code is a retired Easy-difficulty Linux machine on Hack The Box. This box teaches core pentesting steps — from scanning…

The titans of our age, AI and Cyber, had their great race, and while everyone was watching the stock tickers, one of them simply changed the nature of the track, the rules of physics, and the…

On a sale of 1–10.

VIDAR is a C++ based data stealer designed to extract sensitive information from multiple web browsers, cryptocurrency wallets, chat…

Learn how SSRF allows an attacker to access the internal network, read cloud metadata, and escalate privileges.

This is a real life story!

Appshark is a static taint analysis platform to scan vulnerabilities in an Android app. It supports Flexible configuration

Eleven malicious Go packages have been found to target both Windows and Linux, deploying payloads from C2 servers in a stealthy supply chain attack.

As families across India prepare to celebrate Raksha Bandhan, cybercriminals are also gearing up — not with gifts, but with fraudulent campaigns designed to steal money and personal data. In a rec…

The Python Package Index (PyPI) has announced a set of new upload restrictions aimed at protecting Python package installers and inspection tools from ZIP parser confusion attacks. This move follo…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a risk evaluation warning about multiple high-severity vulnerabilities affecting all versions of several EG4 Electronics…

A practical guide to understanding DNSSEC, the bodyguard of DNS, what it is, how it works, and why it’s a big deal in securing DNS records.

Introduction: Why Start with Free Tools?

Vladimir Tsakanyan

As part of an ongoing performance optimization and troubleshooting session for one of our high-traffic production workloads in AWS EKS…