A penetration tester’s practical guide to building an efficient note-taking system that scales with your security research

When you register a domain name, your personal details, like your name, email, phone number, and address, become part of the public WHOIS…

Artificial intelligence has emerged as a double-edged sword in cybersecurity. While defenders harness AI to strengthen digital…

Hi, in this post I’m going to talk about SMB and LDAP enumeration, which are essential when you’re dealing with an Active Directory…

Hack The Box Baby is an Easy rate Windows machine

Free Link 🎈

Turn your hacking expertise into a thriving career beyond bounties.

After discovering an unauthenticated endpoint leaking sensitive user data in the same application (see my previous writeup here), I had a…

In the fast-paced world of software development, speed and agility are everything. Developers are under constant pressure to ship features…

“” is published by Mohammed Bilal.

Stop wasting your time on “fun” projects. Build what employers actually care about

NEW SERIES — RASPBERRY PI ZERO W CYBERSEC PROJECTS

From Business Logic Flaws to Domain Domination: A Hands-On Journey into Active Directory Penetration Testing

In today’s enterprise cloud environments, managing multiple AWS accounts securely is no longer optional — it’s essential.

In this write-up I will be showing my thought process behind solving the aforementioned Portswigger Academy challenge. DISCLAIMER! This…

AI Agents Are Exploding in Power But Without a Trust Layer, They May Be the Biggest Security Risk of This Decade

Every day, millions of email accounts are compromised — sometimes without the owners ever realizing it.  Your email is the key to your…

Note: This challenge can be found on picoCTF .

STOP Buying the Wrong GRC Tool!

This article is my personal interpretation of learnings from the course -Cryptography, taught by Jonathan Katz on coursera. In this article…