Delving into the Handelling and Identification of Common Vulnerabilities and Weaknesses in Software

As the internet continues to evolve, security remains a cornerstone of user trust and data protection. If you’ve ever noticed that…

Practiced path traversal techniques to access unauthorized files, bypass input filters, and understand recursive and null byte exploitation

For decades, AI (Artificial Intelligence) was a cute little subject in computer science, and where researchers gathered together in mainly…

So, it’s 2025, and suddenly you’ve decided you want to be an ethical hacker or a cybersecurity expert. Maybe it’s because you watched some…

Summary

At this point in life, bad situation emerge for us to learn our mistakes and figure out what next is to be done. I’m really delighted I eventually found a real competent hacker after been spammed by…

This is for educational purposes only.

Hands-on SQL injection testing on DVWA in Metasploitable using Burp Suite and sqlmap for ethical hacking

A Windows Registry forensic investigation using Eric Zimmerman’s Registry Explorer, ShellBags Explorer, AppCompatCacheParser, and…

From log collection to threat detection — learn how to effectively deploy SIEM to strengthen your security posture.

Welcome to the part of cybersecurity where no zero-day vulnerability is required just a convincing email and a human who’s a little too…

Day 21: Mobile Application Testing

In this article, we’re going to explore the retired easy box of Netmon, following the guided mode.

Carseat is a Python-based tool that implements most of Seatbelt's security checks with remote execution capabilities for host analysis.

Live Forensicator is part of the Black Widow Toolbox, its aim is to assist Forensic Investigator and Incidence responders

CVE-2025-46762 in Apache Parquet Java enables code execution via malicious Avro schema metadata. Upgrade to 1.15.2 or harden deserialization settings.

Arctic Wolf exposes Venom Spider’s More_eggs campaign, where fake resumes and polymorphic JavaScript target HR to deploy a stealthy backdoor.

CVE-2025-46337 is a critical SQL injection flaw in ADOdb's PostgreSQL driver. Patch to version 5.22.9 or sanitize input to avoid exploitation.

Bridewell uncovers Operation Deceptive Prospect, a RomCom campaign using fake customer feedback to deliver malware via spoofed cloud storage links.