Note: This blog post summarizes my final project for a Hacking Tools course, where I conducted a black box penetration test in a simulated…

Post and article series: Why We Can’t Have Secure Things — Real scams. Real stories. Real cybersecurity lessons from everyday life.

In today’s hyperconnected world, cybersecurity has transcended traditional firewalls and antivirus protocols and emerged as a strategic…

The contemporary cyber threat landscape is a dynamic and increasingly complex environment, characterized by relentless innovation from…

The contemporary digital ecosystem is increasingly interconnected, presenting both unprecedented opportunities and significant…

In an increasingly interconnected world, where digital interactions permeate nearly every facet of our daily existence, understanding and…

In an increasingly interconnected world, safeguarding our digital assets has become an indispensable aspect of personal and organizational…

Step 1: Setting Up the Environment and Discovering the Target IP Address

Okey so we will continue with the labs, in this one we want to retrieve the users table in order to see the username and password of the…

New malicious NPM packages disguised as WhatsApp libraries are destroying developers' code by deleting all files in their current directory.

Technical skill is the foundation of penetration testing. Without it, you can’t even begin. But skill alone doesn’t make a pentester…

How tiny, copycat modules are evolving into a cross-platform supply-chain nightmare

Machine Overview: Code is a retired Easy-difficulty Linux machine on Hack The Box. This box teaches core pentesting steps — from scanning…

The titans of our age, AI and Cyber, had their great race, and while everyone was watching the stock tickers, one of them simply changed the nature of the track, the rules of physics, and the…

On a sale of 1–10.

VIDAR is a C++ based data stealer designed to extract sensitive information from multiple web browsers, cryptocurrency wallets, chat…

Learn how SSRF allows an attacker to access the internal network, read cloud metadata, and escalate privileges.

This is a real life story!

Appshark is a static taint analysis platform to scan vulnerabilities in an Android app. It supports Flexible configuration

Eleven malicious Go packages have been found to target both Windows and Linux, deploying payloads from C2 servers in a stealthy supply chain attack.