Siber güvenlik savunması artık sadece firewall ve antivirüs yazılımlarına güvenmekten ibaret değil. Gelişmiş sürekli tehditler (APT’ler) ve…

Open-source AI security repositories published or significantly updated projects in September 2025.

This is my walkthrough of all the stages of the XSS Challenge (by yamagata21). There are a total of 19 stages in this challenge. The aim of…

Setting up the environment

APIs are under fire. Every single day. Not in theory. Not in slides. In production.

During my internship, I had the opportunity to work on a Website Hacking Project. The main goal was to understand how attackers exploit…

We’re back, just over 24 hours later, to share our evolving understanding of CVE-2025-10035.

Thanks to everyone who reached out after Part 1, and especially to the individual who shared credible intel that informed this update.

In Part 1 we laid out an…

Quick but complete walk-through for the Boot2Root CTF hosted during Cyber Quest 2025.

Today I focused on Nmap — one of the core tools for network reconnaissance and service discovery.Nmap helps you understand live hosts…

📺 Míralo ahora: 👉 https://youtu.be/WXZEsDVzWUQ

TLDR: Foothold — Web terminal (trivial); Privesc — Config file enum + MySQL db enum + port fwd + Zabbix svc + lat mvt + sudo -l (rsync)

A Coffee Machine Took Down X Business: The Weirdest Cyberattack of 2025

The strategic risk of attackers using your own environment against you

This is a walkthrough of Hydra from TryHackMe

Ever feel like you are building security controls in the dark? Imagine having a clear guide that is both practical and globally recognised…

Most of us use package managers like apt or yum without a second thought.  But attackers know that if they can tamper with a package or…

FURTHER READING CAN BE DONE USING THE FOLLOWING