Let me tell you about my bug bounty journey — it started with confusion and ended with me finding a security flaw that could delete any…

🧠 Mastering XSS on a Bug Bounty Platform: Finding, Understanding & Bypassing Defense. my write up in many mistakes. avoid please mistakes Everyone, speak your mind. 🚩 जय श्री …

Cerita nyata tentang bagaimana saya menemukan IDOR, Stored XSS, dan CSRF hanya dalam 1 minggu + [sekolah], tanpa tools automation, dan tips…

In the ever-evolving landscape of cyber threats, some vulnerabilities operate quietly, exploiting the inherent trust within systems. One…

In October 2025, the DeFi lending protocol Abracadabra fell victim to a logic-flaw exploit that drained approximately $1.8 million in…

While researching how major open-source projects handle security vulnerabilities, I came across a fascinating case from researcher Ali that…

This box is all about continuous enumeration and information gathering — gradually using usernames and files to piece together the final…

FortiGate Active Directory Lab: Complete Domain Controller setup with Certificate Authority & DNS configuration.

🛡️ The U.S. cybersecurity market is booming — $86 billion strong and counting.  Ransomware, data leaks, AI-driven attacks — it’s chaos…

Cybersecurity News Review — Week 43 (2025) Critical vulnerabilities in widely-used systems sparked urgent patching efforts this week as threat actors deployed increasingly sophisticated attack …

Understanding How Copilot Accesses Your Data

GZR Observer — Global Daily — Oct 24, 2025 IMF Urges Asia to Cut Trade Barriers Amid Rising U.S. Tariffs and Global Protectionism Geopolitical Tensions And Diplomacy US President Donald Trump is …

While previous articles focused on the technical execution of forensic tasks, from data acquisition to evidence analysis, this one shifts…

When I was a kid we didn’t have Wi-Fi at all — only a slow Ethernet connection to an old PC with 1 GB of RAM and a 250 GB hard drive…

Malware Detection Using Machine Learning and Deep Learning

Hi everyone! This time, I’m back with my experience of the Certified Ethical Hacker (C|EH v13) certification. After months of consistent…

In our first room, TShark: The Basics, we covered the fundamentals of TShark by focusing on how it operates and how to use it to…

TShark is an open-source command-line network traffic analyser. It is created by the Wireshark developers and has most of the features of…

In this room, we will cover the techniques and key points of traffic analysis with Wireshark and detect suspicious activities. Note that…

If there’s one lesson that has shaped my mindset as an ethical hacker, it’s this — CONSISTENCY IS EVERYTHING.