Human replaced by AI 🧐

This is my first blog post — excited to start sharing bug bounty write-ups and security lessons from the field. If you find this useful…

TL;DR: A full, free, 9-hour live bug bounty boot camp is available on youtube (video id: 5rzklapdf4s). The provided metadata lists session…

By Zoningxtr

GoCow is an Easy level Linux machine that demonstrates phishing over CVE-2025–25198 on Cowmail. The vulnerability allows attackers to…

Introduction: Top 10 Women in Cyber Security

Referensi utama:
Athanasios Dimitriadis, Nenad Ivezic, Boonserm Kulvatunyou, Ioannis Mavridis. “Digital forensics framework for reviewing…

The One Login to Rule Them All: Single Sign On-SSO II (the technical version) I still get a little giddy remembering the first time I fired up Kali, typed sudo apt update && sudo apt upgrade, and …

我们每天都在用指纹解锁手机、登录微信、确认支付。指纹认证（FpAuth）已经成为我们数字生活中最信任的“安全卫士”。它如此方便、如此“高科技”，以至于我们想当然地认为它坚不可摧。

🔐 Data Safety Awareness Series: Post 8 Title: “Think Before You Click: How Cybercriminals Trick You with Links” In today’s fast-moving digital world, we often click links without a second …

As we embrace solar energy, enjoying the clean power from those blue silicon panels on our roofs, we might never imagine an invisible…

Walks through finding exposed DWR endpoints, exploiting a DAO SQLi from the browser, and proving the PoC in Burp.

I was fuzzing one of the subdomains for a company and I came across a response with an interesting size

Bug bounty bukan sekadar mencari bug demi hadiah. Ini cara belajar langsung dari sistem nyata, membantu organisasi jadi lebih aman, dan…

ATTENTION: This article is intended for learning and protection only — it should never be used for illegal purposes. I cannot be held…

WARNING: The material below is provided strictly for educational and defensive purposes. I accept no responsibility for any misuse or…

Landing your first role in cybersecurity can feel daunting. Employers want hands-on experience, but gaining that experience without landing…

WARNING: It is very important to realize that what you will be reading should only serve as some form of education. I completely absolve…

The Hacked Training Site Now Broadcasts Its Secrets to the World

For years, passwords have stood as the primary gatekeeper of digital access, but in 2025, that’s no longer good enough. Attackers are not…