The Pyramid of Pain is a cybersecurity framework that categorizes threat indicators by the difficulty they pose to an attacker if detected.

Kenobi walkthrough: SMB → NFS → ProFTPD exploit → PATH-based SUID escalation. Read the concise steps, commands, and flags — follow for more

One code injection technique that often appears in malware development is thread hijacking. In summary: Thread Hijacking is a technique in…

IMade a Chrome extension that can create up to 6 temporary email addresses at the same time.  It is open-source and made for bug bounty…

✨ Link for the full article in the first comment

Introduction: This is a write up for TryHackMe’s Pickle Rick Room. This write up will document the tools and skills needed to complete the…

اللهم علمنا ما ينفعنا و انفعنا بما علمتنا و اجعلها صدقة جارية تنفعنا بعد الممات

Hello, today we continue our CPTS‑OSCP series with the seventh machine, called Remote. This Hack The Box box is labeled Easy and runs…

When I first started learning about cybersecurity, I kept hearing people talk about threats, vulnerabilities, and risks like they were…

GZR Observer — Global Daily — Oct 18, 2025 Nobel Laureate Chen Ning Yang, Trailblazer in Theoretical Physics, Dies at 103 Geopolitical Realignments And Global Diplomacy U.S.-China relations …

Tulisan ini merangkum praktik lab saya saat mempelajari exploit yang dikenal sebagai EternalBlue (kerentanan MS17–010) pada mesin Windows 7…

Blue Team 💙

On 18/10/2025, I was involved in the Cybersecurity Student Contest Vietnam 2025 — a prestigious competition. The contest was quite…

A multi-part investigation exposing the truth about Steam: the corruption, neglect, and calculated lies they hoped to hide.

Cybersecurity has always been a game of speed and adaptation. Attackers evolve, and defenders respond. However, that balance is shifting…

How to measure a vulnerability’s severity

First lets install yara on our system,

Abuse.ch is a research project hosted by the Institue for Cybersecurity and Engineering at the Bern University of Applied Sciences in…

First, access the website.

After diving deep into file upload vulnerabilities part 1 and part 2, I thought I had a good grasp on web application security. But then I…

1. F5 Breach — Source Code Stolen by China-Backed Hackers
 F5 confirmed a nation-state breach stealing BIG-IP source code and zero-day…