In this article, we’re going to explore the retired easy box of Granny, following the guided mode.

Introduction

Once you manage to get some credentials to access Azure, GCP or AWS, use different techniques to get the permissions the principal has and highlight all the potential attacks

Shelter is a weaponized sleep obfuscation technique that allows you to fully encrypt your in-memory payload making extensive use of ROP

PortEx is a Java library for static malware analysis of Portable Executable files. Its focus is on PE malformation robustness, and anomaly detection.

Discover the critical CVE-2025-30091 vulnerability in MoxieManager. Learn how it can allow remote code execution attacks.

Understand CVE-2025-22230: a serious authentication bypass in VMware Tools for Windows that needs immediate attention.

Explore the tactics of the North Korean APT group Kimsuky, also known as Black Banshee. Discover their latest attack strategies.

A new report from CloudSEK highlights a sophisticated malware campaign targeting YouTube content creators through spearphishing tactics. The attackers are leveraging trusted brand names and offers of professional collaborations to deliver malicious payloads…

Explore the dangers of SectopRAT malware, a sophisticated Remote Access Trojan known for its stealthy data exfiltration techniques.

Learn about CVE-2025-26512, a serious vulnerability in NetApp SnapCenter that poses risks to user systems and data.

Explore the rise of the Android malware campaign leveraging the .NET MAUI framework to evade security measures effectively.

Recent advisories have revealed two significant vulnerabilities: an SQLi flaw (CVE-2024-53678) and a cross-site scripting (CVE-2024-53679) vulnerability

Learn about Browser-in-the-Browser phishing tactics targeting online gamers. Stay safe from fake pop-up attacks.

السَّلامُ عَلَيْكُم ورَحْمَةُ اللهِ وَبَرَكاتُه

“Authority, without any condition and reservation, belongs to the nation.”
― Mustafa Kemal Atatürk

Bismillah

The Active Directory environment is the backbone of enterprise IT infrastructure. Setting it up in a home lab is essential for developing…

Explore Security Misconfiguration, API8:2023 learning about an authorisation bypass vulnerability in Next.js.

In a landmark development that could reshape the future of global communications, China has extended quantum-secure communication into the…