Despite its age, FAT32 is still one of the most widely used file systems in the world. Whether you’re plugging in a USB stick, analysing an…

⸻

A thought that stuck in my mind and inspired me to write my first blog on medium

In cybersecurity, theory lays the foundation — but real mastery comes through hands-on practice. This Medium series is crafted for…

By: Hank Yeomans, Head of Product at Conceal

You Signed the Form. You Lost the Rights.

The Email That Opened a Cyber Trap

Now analysis of network traffic is the most important tasks for an Blue teamer. For this purpose I analysed an pcap file from my favorite…

Cryptography

The login functionality for this lab is powered by a `MongoDB NoSQL database`. It is vulnerable to NoSQL injection using MongoDB operators.

The product category filter for this lab is powered by a MongoDB NoSQL database. It is vulnerable to NoSQL injection.

This lab contains a SQL injection vulnerability in its stock check feature. The results from the query are returned in the application’s…

Recently, I discovered a dylib injection vulnerability in the Spotify desktop client.

In this write-up, I’ll share how I approached the machine, what I was thinking at each step, and the path I took to root it.

nmap ile port taraması gerçekleştirdim

Analyse network traffic related to an unauthenticated file share access attempt, focusing on potential signs of data exfiltration.

Legacy is a machine that challenges the ability to penetrate legacy systems and handle various exploitation techniques. Throughout the…

In the Blue machine, we exploit the well-known EternalBlue vulnerability (MS17–010) in Windows systems to gain remote access. The machine…

As the modern enterprise races toward automation and AI, a new digital frontier is rapidly expanding — one defined not by human users, but…

What is SQL injection to Retrieving multiple values within a single column