In 2025, the web remains the primary attack surface for malicious actors. Billions of daily HTTP requests, APIs, AI-powered services, and…

Back in May this year I spent some time going through PHP applications on Github , with a single goal in mind — to find my first CVE.

Introduction

The world of hacking and cybersecurity has always captivated moviegoers, blending intense action with high-stakes drama and cutting-edge…

🧩🔒 Welcome to the dark arts of low-level hacking. In this post, we’re going to take a trip from C to raw shellcode, transforming simple C…

🔍Introduction

Password spraying is a type of cyberattack where an attacker attempts to gain unauthorized access to many accounts by trying commonly used…

The Chasm Between Knowing the Playbook and Living the Nightmare

Hey friends 👋 Welcome to a deep dive into the Windows Portable Executable (PE) format. This blog isn’t about short tips or quick answers —…

Introduction: A Security Operations Center (SOC) analyst plays a vital role in safeguarding an organization’s digital assets from…

🟣 What is zero-trust?

Learn how attackers progress through the Cyber Kill Chain and how defenders can detect, disrupt, and respond at each stage.

In today’s fast-changing digital world, cyber threats are increasing at an alarming pace. From financial frauds to data breaches…

Cybercriminals are leveraging fake system optimization tools to target macOS users with a new malware strain called Shamos Infostealer…

A new cybersecurity threat is emerging from APT36, a sophisticated state-backed hacking group, as they increasingly target Linux…

Cybersecurity is no longer just about protecting data; it is about safeguarding nations. This reality took center stage at OTSEC MENA 2025…

Another Linux Lab Machine by TryHackMe , this lab is exploited via chaining multiple exploits to reach RCE …..

From Status Symbol to Subscription Scam: The Fall of X’s Blue Checkmark

If you haven’t read BattleMe, I suggest that you go and read it first because it is the Revenge version of it

TL;DR: In just 10 minutes you will spin up a Flask API with SQLite + SQLAlchemy that contains common OWASP API Top 10 2023 vulnerabilities…