This writeup explores a CSP Bypass with script-src whitelisted assets inside a .innerHTML DOM sink.

When I first heard about cybersecurity, it felt like a distant world – full of hackers, codes, and mysterious breaches happening somewhere far away. In today’s world, where everything from banking to…

Subtitle: A Security Researcher’s 5-Day Journey Through Responsible Disclosure

What is Web Security?

The Role of Exotic Top-Level Domains (.st, .to, .su) in Dark Web and Underground Forum Operational Security A Study of Evasion Tactics and Vulnerabilities Underground forums and dark web marketplaces…

New to cybersecurity? No problem! This book breaks everything down into simple, friendly lessons perfect for beginners, kids, or anyone who…

Passing the Security+ felt great. Here’s what you PBQs might look like!

First lets explain what Bash is for those who don’t know! A Bash script is just a text file that contains a list of commands you want your…

Heyyy!! Where did that file come from? Who downloaded it — and from where? Ever downloaded a Word doc or a PowerPoint and gotten that…

TL;DR: Microsoft Defender flags something as Trojan:Script/Wacatac.B!ml and now you’re panicking. Odds are pretty good (~40%) it’s a false…

As more organisations start using large language models (LLMs), securing them has become a top priority. It’s essential to have a thorough…

Learn shellcode encoding, packing, binders, and crypters

Agents everywhere!! In the world of AI, agents are the first line of interaction between the user, the LLM and the data, but… What is an…

APIs are the digital highways connecting your applications, data, and customers, enabling the seamless experiences we now expect. To manage…

بسم الله، والصلاة والسلام على رسول الله
الحمد لله الذي عَلَّمَ بالقلم.. عَلَّمَ الإنسانَ ما لم يَعْلَم والصلاةُ والسلامُ على خيرِ مُعَلِّمي…

APIs are the backbone of modern applications, enabling seamless communication between services. However, when not properly secured, they…

The cyber world. Is single sign-on safe?

How Tomorrow’s Programmers Will Shape Our Future
Within the shadows of our hyper-connected world, a unused war is brewing.
It’s not battled…

Wembley Stadium stands as the beacon of excellence for stadium security across Europe. With the increasing complexity of threats – ranging from terrorism to organized crime – security in sporting…

I’m thrilled to share that I competed in the Aswan CTF Finals 2025 with my incredible team, Vanguard, and we secured 4th place!