I’m Amr Khaled — a Web, Network & Android Penetration Tester, and an active Bug Hunter on platforms such as HackerOne and Bugcrowd.

The Setup: Wrong Target, Right Discovery

“بِسْمِ اللَّهِ، وَالْحَمْدُ لِلَّهِ، وَالصَّلَاةُ وَالسَّلَامُ عَلَى رَسُولِ اللَّهِ، اللَّهُمَّ عَلِّمْنَا مَا يَنْفَعُنَا، وَانْفَعْنَا…

What is Penetration Testing?

A step-by-step guide to building a home SOC lab using Wazuh, Docker, and Sysmon to detect advanced threats like Mimikatz.

In today’s rapidly evolving threat landscape, businesses need more than just basic protection — they need expert guidance. CyberSecOp…

RedTail is a CryptoMiner Malware that been defected for the first time by in late-2023 / early-2024 and remained observed in 2024–2025 Its…

I just finished setting up my cybersecurity virtual homelab. I have intentionally created a poorly secured environment. The next step is to…

This guide walks you through the process of installing Elastic on Kali Purple. It follows the general flow of the Kali Purple…

Remote Desktop Protocol (RDP) brute-force attacks are among the most common ways attackers try to gain unauthorized access to Windows…

In an era where digital transformation is accelerating and cyberattacks are becoming more sophisticated, Identity and Access Management…

Beginner’s Guide to Bug Hunting: How JavaScript Analysis Led Me to Multiple Hidden Vulnerabilities

If you’ve managed traffic in Kubernetes, you’ve probably spent plenty of time working with Ingress controllers. For years, Ingress has been…

This is part 6 of my ongoing series about the history and application of cryptography. You can read part one here.

I read somewhere that humans don’t use up to 10% of their brain before they die. That hit me. I realized I’ve been coasting for too long…

Sturnus is a next-gen Android trojan that bypasses encryption, mirrors your screen, and hijacks your device with silent precision.

The 7th edition of the DIGIT Expo brought together thought leaders, engineers, and innovators to discuss the latest trends. 5 stages, 50+…

Akira ransomware crews have learned to take advantage of the confusion that happens when two companies merge. SonicWall SSL VPN appliances…

How to Weaponize these Patterns for Exam Success

KYAML examples with comments and curly braces