is a cryptographic network protocol that provides standard secure (method/tunnel) to remotely access and manage devices (eg. switches and…

In OSINT and cybersecurity, obscurity isn’t weakness — it’s armor.

Summary  In mid 2025, a class of insecure file-handling mistakes in the popular WordPress plugin FileAway (and several forked/derived…

Introduction

Hi, I hope you all are doing well.

Here, we have a log-in page, and the challenge’s title is called “SQLiLite.” So we already know that the vulnerability here is SQL…

Building Your Digital Fortress Against Database Saboteurs

tl;dr - repo here.

The Crystal Kit is an experimental project designed to replace Cobalt Strike's Sleepmask. The Sleepmask (and BeaconGate) are key to Beacon's runtime evasion strategy - not only does it mask Beacon's memory, it also acts as an API proxy…

Date: October 5, 2025
Subject: Unauthorized Administrative Access Leading to Critical Information Disclosure

📺 Ver vídeo completo: https://www.youtube.com/watch?v=XJyf2jI9Hpc?si=czSRsC-zAc08FSfk

When a Simple Avatar Upload Became a Server Takeover: File Upload Vulnerabilities Explained

في عالم الجرائم الإلكترونية المتسارع، أصبحت الحاجة إلى مصادر معلوماتية دقيقة ومباشرة أمراً أساسياً لفهم التطورات في مجال الأمن السيبراني…

Today’s learning journey was centered around Active Directory (AD) and I must say, this was an exciting room.

Skipping the summary because it is clear from the title :)

I’ve been running tests in my lab to find out how much of what I expect my SIEM to detect actually gets detected. As someone aiming to land…

Need verified info on a person, business, or website? 🕵️‍♂️ I provide expert OSINT investigations, lead generation, & data verification —…

The Red Hat breach highlighted a critical blind spot outsourced development without shared security governance. Third-party risk is…

The network design for the home lab environment has been through several iterations. This involved me redoing the whole environment…

SSH (Secure Shell) is the standard protocol used to securely connect to remote Linux servers. It provides encrypted communication between…

A list of active cybersecurity publications on Medium, ranked by follower count and recent activity.

Welcome! This write-up walks through the TombWatcher season8 machine on Hack The Box. My goal is simple: stay motivated, record what I…