When I first started building my pentesting lab, I assumed CPU settings in virtual machines didn’t matter much.

From a 500 Server Error to Full Database Access in Mercedes-Benz

Two major cyberattacks and the unexpected shift they triggered in my career.

There are few tech frustrations as universal as seeing the “iPhone Storage Almost Full” notification pop up. It almost always happens at…

Bazen 2FA (two-factor authentication) adımlarındaki hatalı mantık nedeniyle, kullanıcı ilk giriş adımını doğru şekilde tamamlasa bile, web…

Overview of the Threat Campaign

When the crew of the Nostromo intercept a mysterious signal from LV-426, they assume it’s a distress call. Only later does Ripley uncover…

Bir önceki yazımızda siber güvenliğin saldırı gücü olan Red Team’i incelemiştik. Ancak her saldırının bir de savunması olmalıdır. Dijital…

Riding the Shai-Hulud of Supply Chains The Shai Hulud incident is one of those cases that really exposes how fragile the npm ecosystem can be. Nothing about the attack was overly sophisticated, the …

Executive summary: During assessment of the Outbound Linux host, assumed breach credentials enabled authenticated access to Roundcube…

I just built a cybersecurity virtual homelab. My first step was to conduct a security assessment for the Windows 11 executive workstation…

I just built a cybersecurity virtual homelab. My first step was to conduct a security assessment for the Windows 11 executive workstation…

In this project, I analysed a PCAP capture of a compromised Windows machine to uncover signs of a Dridex banking Trojan infection. Using…

APIs quietly power almost everything we do online from checking our bank balance to logging in with Google or receiving an OTP. They act as…

Learn about the BFLA (API5–2023) vulnerability, how to exploit API privilege escalation, and the master guide for reporting it.

How a hidden Bluetooth vulnerability triggered a cross-platform malware outbreak that shut down a small business — and what every company…

Ahh… the hard password challenges. Where Hashcat slowly eats away at your soul, and the electricity bill arrives with a condolence card…

We tend to imagine hackers as hoodie-wearing geniuses typing at lightspeed in a dark room, but in reality Most hacks don’t require elite…

Simple Tool Became My Secret Weapon for Cracking Tough Cases

FourCore started in a college dorm room during the pandemic and has since grown into a cutting-edge red teaming platform trusted by…

I left stable distros for Arch Linux. Here is how building my OS from scratch taught me more about Linux internals than any textbook.