I recently participated in the CRHC CTF 2025, a Jeopardy-style competition that tested skills across Web, Crypto, Forensics, Pwn, and Misc…

When running a homelab — whether it’s a NAS, Home Assistant dashboard, or a small self-hosted app — you’re exposing some services to your…

When companies or even regular people need to store and access a lot of data, they don’t just use a regular computer hard drive. Instead…

The inside story of a fraudulent AI platform and the experts who made recovery possible.

Hello if your stuck on Game 2–04 from Sourcing Games website for OSINT challenges i got you (;

A detailed account of my experience with Usukwayfair and the recovery process.

What happened when I trusted Robinhood ot, and how I managed to recover part of my funds.

A first-hand account of a fake AI trading scheme and the experts who helped me recover stolen crypto.

How Qexbitast lured investors with false promises and how I recovered some of my stolen crypto.

As a penetration tester and security researcher, I’ve seen my fair share of vulnerabilities. But recently, I discovered something that…

# Context

Web #1:
The first web application is vulnerable to Cross-Site Scripting (XSS) via the loan comment field, where malicious input such as…

Sherlock Scenario

Learn how to use API Governance in WSO2 API Manager 4.5.0 to block APIs with weak authentication. Secure your APIs by disabling API Key…

> About Author Hi, I’m Sharon, a product manager at Chaitin Tech. We build SafeLine, an open-source Web Application Firewall built for…

본 글은 2024년 5월 3일 발생한 Whale Wallet 해킹 사건을 중심으로, 사건 개요, 자산 유출 구조, 공격 방식, 세탁 경로, 그리고 보안 시사점을 종합적으로 분석한 기술 칼럼입니다.

By: Safa’at Dinata Putra — Versatile IT Technician

A DNS Zone Transfer (AXFR) is a mechanism used to replicate DNS databases across a set of DNS servers. It’s the process where a secondary…

How I Turned a File Read Into Full Server Control in 37 Minutes

The New Arms Race in the Digital Shadows