Why Public Projects Widen the Attack Surface

How I Ran a 27B AI Model for FREE Without a Local GPU (Zero Refusal) Hello folks! I’m Surya Kiran, a final-year CSE student from Bengaluru. Today, I’ll walk you through how you can run large AI …

What if you could turn subdomain enumeration into a complete reconnaissance pipeline — combining passive sources, DNS brute forcing…

A dangling CNAME, a claimable Mailgun domain, and a rejection that taught me more than an acceptance would have.

I sent “otp”: false in a JSON payload.

Introduction

Want to join the “elite club of CyberHeroes”? Prove it, log in. Bold claim for a login page that, spoiler, does absolutely none of its…

A room about analysing a series of maldocs.

Network Forensics Room — Solution Write-up

When we last left our hero, he was delving into the mind of the cyber professional. The incessant learning, struggling to solidify the…

A story about how a single misread pair of bytes let a public-looking IPv6 address secretly point at 169.254.169.254.

WhoAmI

It started with a joke:

Your UART adapter is not a hacking tool. It is a stethoscope

When I first started learning cybersecurity, I never imagined that one day I would have an official letter from NASA recognizing me as an…

Every Method, Technique, Bypass, and Defense You Need to Know

A critical vulnerability assigned CVE-2026–78159 (CVSS 9.8 Critical) was disclosed in The Events Calendar — one of the most widely deployed…

One lies about identity. The other inherits privilege.