Behind the Scenes of My LLM Penetration Test for a Client

A practical guide to securing your .NET APIs by preventing over-posting, under-posting, and unintended EF Core data updates.

In the world of cybersecurity, attackers don’t always need zero-days, malware, or advanced exploits. Sometimes, all they need is a simple…

Everest ransomware claims to have breached Under Armour, stealing 343GB of data, including customer info, product records, and internal company files.

Attackers rarely guess passwords. They reuse real credentials that info-stealer malware has already collected and dropped in plain text…

Threat modeling has evolved from being a whiteboard-only exercise to becoming a critical part of modern software engineering. As systems…

Non, c’est l’exact opposé enfaite

Last all those parts of the AI / LLM Hacking we tried to cover the HIGH severity Issues within the LLMs and how to exploit those AI model…

Lab: Exploiting XXE using external entities to retrieve files

Cybersecurity in 2025 is no longer optional — every developer, tester, and IT professional needs basic security knowledge.  But beginners…

Road to OSCP

Full walkthrough of the Farewell room. Explains how to bypass WAF and use XSS to obtain admin cookies! Explains steps thoroughly!

A few days ago, a founder on LinkedIn described a job-offer fraud that turned out to be a Lazarus-style supply-chain attack. The sequence…

As a working Penetration Tester, I am solving boxes from the infamous Lainkusanagi OSCP List. Come hack with me to prepare for your OSCP!

People often miss the obvious weak spots in security. They get too caught up hunting down those fancy, high-tech attacks.

Hi, Everyone

Internships have become one of the trendiest pursuits for students today, often seen as the gateway to experience, exposure, and…

The Corruption of the Protectors – AI Poisoning Attacks Against Defensive Models The cybersecurity community has invested decades in building detection systems to identify attackers – anomaly …

You might ask — why?

Your car isn’t just a mechanical machine anymore — it’s a rolling computer network with vulnerabilities that cybercriminals are actively…