Today I’m writing from a place of intuition, experience, and the deep curiosity that anchored me to the world of cybersecurity. This is my…

A few months into learning cybersecurity, I realized something that nobody tells you, hacking isn’t really about hacking.It’s about…

A common experience that everyone who has worked in a corporate setting goes through is the inevitable message of a cybersecurity awareness…

Inspecting the Web Application

Monitoring Active Directory: IIS, Web Shells, OWA, and VPN Authentication In the previous post, I touched upon domain vs. local accounts, as well as the mechanisms of Kerberos and NTLM authentication …

What is FuzzingLocalBot?

Hello everyone! I’m Omar Mohamed, also known as 0xnanashi.

A Company That Survived Everything Except a Leaked Password and the Ransomware Attack That Followed

“Jobs’ vision of Signal was the top 3 to 5 things you have to get done in the next 18 hours. Anything that stops you from doing that is the…

Hey Hackers, I am Parth Narula. A penetration tester, bug hunter, red teamer and overall a security researcher. I live for those moments…

Sensitive Debug Leakage

BFLA is what happens when the right user hits the wrong function. It rarely shows up in a tutorial, and it hides in exactly the endpoints…

Artificial intelligence is becoming part of everyday business faster than many companies can adapt.

If you’re new to Linux privilege escalation, the PATH variable is one of the easiest and most common ways to go from a low-privileged user…

From working with real-world IT and security challenges to preparing for the EC-Council Certified Ethical Hacker certification.

Task 2 — Malware Analysis

1. Executive Summary

This lab is easy, but requires a sharp mindset to realize the difference between normal and abnormal responses from a web. Like the…

I kept saving things I knew I would need later: a GitHub repository, a Reddit answer, a post on X, a useful article, a small code pattern…

Over the past year I worked through two internal security reviews on a production Spring Boot service, closing nine High-severity findings…