En 2023 publiqué el artículo “Análisis de Phishing | Quién está detrás de este tipo de ataques?”, en el que analicé un sitio de phishing…

In September 2025, Delhi witnessed its biggest digital arrest fraud — a chilling example of how cyber criminals can manipulate fear, trust…

Shadows in the Algorithm

30 must-know cybersecurity questions and answers covering encryption, attacks, defenses, and essential security tools.

How the NSA and Global Security Agencies Are Racing to Reinvent Cryptography Before Q-Day

Rooting the box with malicious odt file for reverse shell, deploying webshell to get web user and become root with potato.

What is Broken Access Control?

When we talk about cybersecurity, it’s easy to think only about firewalls, antivirus, or complex codes. But real security is about having…

A critical vulnerability in WordPress tracked as CVE-2025–5947 with a CVSS score of 9.8 was recently discovered. This is a flaw in the…

“” is published by Abdusselam Karahan.

Learning code splitting, lazy loading, and exposed source maps from a Bug Hunter Perspective!

✨ Link for the full article in the first comment

Hello Pentesters — hope you’re well.
 Today I’m sharing a short write-up of a reflected XSS I discovered while conducting a contracted…

Millions of Discord Users Exposed. Are You Safe From This Data Compromise?

Network scanning is the backbone of any meaningful security assessment. Whether you’re mapping an environment, discovering assets, or…

I finished 2nd place overall in the QU3STC0N CTF. This writeup covers my solution for all the flags I found.

Today, we continue the CPTS-OSCP series with the fourth write-up: HackTheBox’s Active machine. The target runs Windows and is rated Easy…

How AI security tools can flag phantom threats and why engineers must stay vigilant

Imagine this: You’re a detective in a big city chasing a group of cybercriminals. Every time you track their hideout, by the time you…

This Python script allows cybersecurity analysts, threat hunters, and SOC teams to validate large volumes of Indicators of Compromise…

Getting an offer from AAA can be a good thing. In this case it is a cyber attack and should be denied and reported!