A few months ago, I published a post called Modular PIC C2 Agents where I mused about what it could look like to build a C2 agent out of individual (modular) COFFs. The idea was to build a capability by swapping interchangeable parts in and out based on the…

In the dynamic landscape of modern software engineering and advanced IT operations, navigating the intricate relationship between…

The digital landscape evolves at an unprecedented pace, rendering static cybersecurity defenses insufficient against the sophisticated…

The pervasive and evolving landscape of cyber threats often directs attention towards external adversaries, yet a profound and often more…

Scam Callcenters

Photo by Vitaly Gariev on Unsplash

https://amzn.to/4oBD2in

Learn about some of the technologies used to extend networks out onto the Internet and the motivations for this.

Introduction

Understand how data is divided into smaller pieces and transmitted across a network to another device.

Learn about the fundamental networking framework that determines the various stages in which data is handled across a network.

A new Go-based remote access trojan, ZynorRAT, is targeting Linux and Windows. Its unique command and control is managed entirely through a Telegram bot.

Learn to use Wfuzz, the key tool for web fuzzing in cybersecurity. Discover directories, files, and vulnerabilities with this essential…

If you’re wondering where to start in cybersecurity and how to prove you’re serious about learning, this post is for you. I’m sharing the…

The real reason security policies fail isn’t technical — it’s deeply psychological

That sentence has been bouncing around in my head for months.

In some ways, machine learning for cybersecurity is very similar to the traditional definitions of machine learning I’m acquainted with…

How I used Caido Automate in TryHackMe’s Corridor room to skip the grind of manual testing.

Race Condition in OTP Request — Unlimited SMS Bombing Description: I discovered a race condition in the OTP delivery flow that allows an attacker to trigger a very large number of OTP messages …

A sprawling network of malicious domains, some active since 2020, reveals a long-running cyber-espionage campaign targeting US telecoms and…

The Foundation of Digital Trust — Part 1