A step-by-step forensic analysis of how I investigated the LetsDefend “SOC161 — Log4j RCE Exploit” alert on a simulated Minecraft Server.

Deconstructing Stealc: A Forensic Dive into a Modern Information Stealer

Challenge : To retrieve the photo of Bjoern’s cat in “melee combat-mode”.

CPTS Prep Pt.2

Day 7: Threat Intelligence in SOC

Hey everyone!

Author : SYREAL

Introduction

When you build a web application, chances are you think about features, design, and performance first. Security often comes later — if it…

When we discuss cyber threats, we often envision phishing emails, malware, or ransomware. But what if I told you that attackers don’t…

A writeup for “Invite Only” on TryHackMe

In the digital age, cyberattacks are no longer distant threats — they can cripple global operations in a matter of hours. On June 27, 2017…

When I first worked on a penetration testing assignment in my cybersecurity class at Johns Hopkins, I didn’t expect a consumer drone to…

After analyzing 10,000+ npm vulnerabilities and security incidents across production environments, I’ve distilled the most critical…

Internet is a great place to connect, learn, and share your thoughts, but it is as scary as it is wonderful. Whatever we share on the…

Walkthrough sshcontrol Proving Grounds This lab explores a web application running on Node.js vulnerable to time-based SQL injection, allowing extraction of user credentials and password hashes. The …

Enumeration

Moving past compliance to real risk and ROI

https://amzn.to/3URDyLh

When we talk about application vulnerabilities, BOLA (Broken Object Level Authentication) is one of the top issues highlighted in OWASP API…