VPN

Okay, look. Another day, another iPhone vulnerability. This time it’s a zero-click worm that could, theoretically, have emptied your crypto…

Hi, I’m Jason Miller — a tech enthusiast, cybersecurity researcher, and someone who believes that privacy should be a right, not a…

Cybersecurity skills aren’t just learned by reading — they’re built by doing. The safest way to practice hacking, malware analysis, or…

By Ayush

Difficulty: Easy 
 Category: Social Engineering / OSINT
 Link to Room: Humans as Attack Vectors

Before delving into byte-level analysis, remember one big idea: NTFS turns every routine file action into a meticulous forensic breadcrumb…

Previous Post : Command Injection — Detection

It’s not hacking. It’s not breaking into databases. And it’s definitely not just “Googling something.”

Vulnerability Type: Use-After-Free (UAF)
 Affected Component: Windows Win32k Kernel Subsystem
 Severity: High
 CVSS Score: 7.0 (Important)…

How a 2015 Dahua CCTV camera port scan led to finding a legacy zero-day on port 42323 Telnet, still visible years after being patched.

Introduction

Decoding the Art of Detecting and Exploiting Time-Based SQLi with Insights from HackerOne Report

The modern software landscape demands not just speed and agility but also unwavering security. DevSecOps represents a pivotal paradigm…

Introduction

Introduction: The Silent Threat of Zero-Click Exploits

A Covert Cyber Strike

When Our Payment Gateway Became a Hacker’s Playground

In the previous blog, OAuth Hacking Guide — Part 1, I covered the basic concepts of OAuth, its working mechanism, and the different types…

A devastating vulnerability chain in NVIDIA’s Triton Inference Server has exposed millions of AI deployments to complete remote takeover…