very foundation of the field: CIA and DAD

“If your website were a house, you’d want locks on the doors, but you also need someone occasionally trying the windows and attic.” - paraphrased cybersecurity wisdom Security is boring, until it…

The industry drumbeat is getting louder: deprecate HTTP/1.1 in favor of HTTP/2 and HTTP/3. For in‑house pentesters, this isn’t just a…

Objective: Gain highest privilege on the target and retrieve the flag
 Target IP: 3.101.75.73

https://tryhackme.com/room/gallery666

TASK 1 | Introduction to Port Forwarding

🚀 Introduction

In the last blog, we explored user enumeration, learning how to identify who we are on the system and what permissions we have. Now, let’s…

Ruby on Rails has your back when it comes to cross-site scripting (XSS) — by default, it escapes all strings in your views so malicious…

By Zoningxtr

Web Application Firewalls (WAFs) — such as Cloudflare, Akamai, and AWS Shield — are designed to detect and block malicious requests before…

Google’s been king of the hill, but even kings get surprised. I landed a zero-click account takeover there — no clicks, no warnings, just…

Hi, my name is Ahmed Mahmoud, and I am a penetration tester and bug hunter. Today, I will share details about a zero-click account takeover…

The hacking mentality (the unglamorous reality)

Task 1 What is the Purpose of Malware Analysis?

Listen, Understand, Design, Profit

Target Name: DVAPI

How websites work

These two terms come up a lot when we talk about threat detection — basically, whether a security system spots real threats or messes up…