My Wazuh Journey for SOC Monitoring: Installation, Challenges, and First Impressions

Every year, Google releases various analytics on cybersecurity events. This year, I want to focus on their zero day exploits. They…

Facts:

-John Levonick, Senior Partner at Garris Horn LLP

Hello everyone! I hope you’re all doing well and staying safe. This is my first time writing a writeup, and I want to share my experience…

Many people in my life often come to me with cybersecurity questions. While I do not mind answering them, this field has a lot of jargon…

OT Security has become critical to protect industrial systems, utilities, transportation, and manufacturing. As cyber threats evolve…

Wazuh’a Giriş ve Temel Özellikler

Quick overview: an medium-difficulty Windows machine a combination of web exploitation, kernel vulnerabilities, and post-exploitation techniques are used, making Hospital an excellent box for…

Are you a penetration tester or red teamer looking to level up your skills? Understanding network segmentation is crucial for successful…

Whether you’re breaching boxes in a red team engagement or flexing your skills in a lab, one truth remains: command-line mastery separates…

Pwning a TryHackMe Lab with a Locked Login, a Leaky File Manager, and a Clever Privilege Escalation

Creating a custom rule on Snort and performing detection analysis on a PCAP file

If you’ve been exploring the world of ethical hacking or cybersecurity, chances are you’ve come across two big names — Kali Linux and…

X官方並沒有提供手機端用的SDK，但官方有整理其他人寫的SDK來讓開發者串接使用(有些因為X部分API要費用則不維護了)

Overview

Hey folks! I know it’s been a while since I last published an article — but hey, better late than never, right? For those of you who are…

From Login to Leak: The $450 OAuth Token Theft Vulnerability Explained

A full guide for bug bounty reconnaissance

XML files are harmless — they’re just structured text, right?