Introduce Linux file capabilities, how they differ from SUID/SGID, how attackers may abuse capabilities (e.g., setcap), and defensive…

TLDR: Foothold — Web enum (joomla) + bruteforcing + PHP webshell; Privesc — SQL enum + lateral movement + file system enum + pspy…

This is a complete roadmap to planning and implementing a modern-day antivirus system from idea to implementation. We cover architectural…

I wasn’t surprised the first time I saw someone get hacked from a pirated website. That’s kind of the deal, right? You click “download”…

In today’s digital world, security is no longer optional; it’s a fundamental part of every product and service. Whether you’re logging into…

Challenge : Find carefully hidden “Score-Board”

Author: M Mustafa Hussaini (0xmust4fa) Category: Web Security / Bug Bounty / CORS Vulnerability Lab: PortSwigger Web Security Academy — Basic Origin Reflection Introduction Cross-Origin Resource …

When investigators need to go beyond simple timestamps, the USN Journal ($J) becomes a goldmine of forensic evidence. Unlike the Master…

Welcome! This write-up walks through the Environment machine on Hack The Box. My goal is simple: stay motivated, record what I learn, and…

HELLO My friend….Let’s continue :)

Artificial intelligence doesn’t sleep, but it dreams of deeper understanding .

Step-by-step guide to exploiting Soulmate HTB machine with web vulnerabilities, reverse shell, and privilege escalation.

Learn how to perform blind SQL injection with a recursive enumeration technique, turning a simple boolean-based vulnerability into a…

A step-by-step guide to my personal bug bounty methodology for finding web cache deception vulnerabilities quickly

As a bug bounty hunter, your ability to uncover vulnerabilities efficiently depends on the tools and techniques in your arsenal. In this…

This is the second part of a series where my initial idea what to dive into the world of Linux. In doing so it dawned on me to start a the…

Whether you’re breaking into IT/Cybersecurity or revisiting some networking basics while working in the field, you’ll definitely run into…

Inside Qilin: How a Professionalized RaaS Operation Redefined the Ransomware Landscape in 2025

As a member of the DFIR team, you are assigned to investigate a security incident involving suspicious remote activity. Alerts have…