What nobody talks about in the world of white-hat hacking

عُدْنــا والعَـوْدُ أحْمَـدُ

Handy tools in your OSINT investigator journey

How a Perfectly Crafted Impersonation Almost Cost Me Everything and What I Learned About Digital Trust

TLDR: Foothold — Web enumeration + PHP file upload; Privesc — Switch users (weak password) + sudo -l

Protecting digital assets from evolving cyber threats requires a profound understanding of security intricacies and robust architectural…

Decoding Cyber Security: A Deep Dive. Understanding and mitigating cyber threats is paramount in today’s digital landscape; this article…

A phishing-led npm supply chain attack compromised millions of weekly downloads, but IoCs, detection scripts, and remediation steps can…

Bu yazı serisinin amacı, web uygulamalarında sıkça karşılaşılan güvenlik zafiyetlerini hem saldırgan (Red Team) hem de savunmacı (Blue…

When I first discovered Kali Linux, I imagined hackers typing green code on black screens, unlocking secrets of the digital world. I wanted…

“Our sales POS froze for 17 seconds. When it came back online, our electricity bill was 4x higher the next month.”

Why weak passwords and weak partners leave you exposed

When most people use Google, they type simple search queries to find information. But hackers, researchers, and cybersecurity professionals…

In the world of cybersecurity, few vulnerabilities have persisted as long — or caused as much damage, as SQL Injection. Despite being…

Quantum computing in cybersecurity represents the application of quantum mechanical principles to enhance and revolutionize digital…

link : https://www.vulnhub.com/entry/kioptrix-level-1-1,22 Platform: VulnHub Difficulty: Beginner Goal: Get root access “This is my…

link : https://www.vulnhub.com/entry/kioptrix-level-11-2,23/
Platform: VulnHub
Difficulty: Easy
Goal: Get root access
“This is my…

Let’s look at how the traditional (manual) method and the automated approach work for identifying vulnerabilities.

🕵️‍♂️ The Beginning: Seeing a 403 on Feroxbuster

TLDR: Foothold — Web enumeration + SSH bruteforce; Privesc — SUID bit misconfig (/usr/bin/gdb)

In the red team world, Evilginx has become a well-known framework for adversary-in-the-middle simulations. It’s powerful, but there’s a…