In modern web applications, backend logic often hides behind layers of UI workflows and API routing. But sometimes, the most impactful…

In this challenge, a fictional heist takes place inside the Louvre. My objective in Task 1 was to access the investigation portal and…

Phishing — Merry Clickmas

Learn how to use the Social-Engineer Toolkit to send phishing emails

Welcome to this new Medium post. In this one, we’re working on the next part of the Tor-based C2. We’re protecting our endpoints to ensure…

Introduction

Introduction

The Meeting Room Impostor: How AI Assistant Names Became a Security Blind Spot A product manager starts her weekly team sync. Nine familiar faces appear on screen, plus one participant labeled …

The Human Firewall: Why Psychology, Not Just Code, Defines Our Cybersecurity Future We’re spending billions on firewalls, AI, and encryption, but the biggest vulnerability in every company is still …

Today I moved beyond simple ICMP traffic and focused on understanding how real web communication works at the packet level. I used Firefox…

O DVWA (Damn Vulnerable Web Application) é uma ferramenta feita para treinar segurança ofensiva. Um dos módulos é o Command Injection…

For the last two years, I’ve watched engineering teams wrestle with tech debt in real time — across migrations, audits, rushed rewrites…

Everyone’s worried about ransomware. After Colonial Pipeline, Change Healthcare, and the endless stream of double-extortion attacks…

In what might be the most ironic cybersecurity discovery of 2025, researchers have found that the answer to breaking billion-dollar AI…

What Australian Businesses Need to Know About the Cyber Security Act 2024 Australia’s first standalone cyber security law, the Cyber Security Act 2024, has been introduced and is reshaping how …

The firewall no longer protects the castle walls.

In this article , I have talked about a recent scam that I encountered that is getting more common and common on whatsapp

Stay obscure. Stay boring. Stay safe.

This assessment was honestly one of the closest things I’ve seen to real SOC work inside a lab environment. Nothing is spoon-fed, the logs…

Ayo, it’s mrknightnidu! Hope you all are good well. Today I’m talkin about that time I legally hacked an AI… and got paid for it!

This CTF is part of the event Advent of Cyber 2025 Hosted By TryHackme