A small mis-configuration pays !!!

After earning some reputation points from public programs on HackerOne, I was excited when I received my first invitation from — let’s…

In our always-online world, we juggle dozens of accounts — email, banking, shopping, social media, and more. Each one holds personal data…

Echo Chamber

Hello, Hello, Hello Hackers…!!! Welcome to my blog…!!!

Static Application Security Testing (SAST) is a key part of modern application security. Over 70% of applications have at least one…

If you’ve been following me for a while, you already know how much I love Sublime. It’s one of those tools that just keeps getting better —…

Picture this: your social media accounts vanish overnight, your bank account is drained, and your private life is exposed. Scary, but it is…

The FCC’s decision to potentially scrap telecom cybersecurity requirements has raised eyebrows, to say the least. Is it a calculated risk…

Because Awareness Was Just the Spark; Now We Build the Fire

INTRODUCTION

Synthetic identity fraud is one of the fastest-growing threats in retail banking and fintech. Instead of stealing a single person’s full…

OpenAI vient de lancer Atlas, rejoignant la bande des navigateurs IA : Perplexity Comet, Dia, Genspark…

NFS Share leaks user creds -> PostgresSQL after port forward -> Set SUID binary for backup script to copy.

Foothold on docker via Limesurvey plugin, password in env and privesc with shared directory.

Microsoft Access db file, Pre2k computer account, GenericWrite, AddMember and ZeroLogon somehow.

A short writeup on the Tryhackme room Metasploit: Introduction

vulnhub merupakan platform yung biasa digunakan untuk belajar boot to root ataupun attack defense. kali ini kita akan mengerjakan salah…

Because Linux doesn’t just teach you commands, it teaches you control.

All you need to know about Windows OS security as an Ethical Hacker — User mode vs Kernel Mode, Access Token vs ACL, Privileges vs…