Overview of the Threat Campaign

When the crew of the Nostromo intercept a mysterious signal from LV-426, they assume it’s a distress call. Only later does Ripley uncover…

Bir önceki yazımızda siber güvenliğin saldırı gücü olan Red Team’i incelemiştik. Ancak her saldırının bir de savunması olmalıdır. Dijital…

Riding the Shai-Hulud of Supply Chains The Shai Hulud incident is one of those cases that really exposes how fragile the npm ecosystem can be. Nothing about the attack was overly sophisticated, the …

Executive summary: During assessment of the Outbound Linux host, assumed breach credentials enabled authenticated access to Roundcube…

I just built a cybersecurity virtual homelab. My first step was to conduct a security assessment for the Windows 11 executive workstation…

I just built a cybersecurity virtual homelab. My first step was to conduct a security assessment for the Windows 11 executive workstation…

In this project, I analysed a PCAP capture of a compromised Windows machine to uncover signs of a Dridex banking Trojan infection. Using…

APIs quietly power almost everything we do online from checking our bank balance to logging in with Google or receiving an OTP. They act as…

Learn about the BFLA (API5–2023) vulnerability, how to exploit API privilege escalation, and the master guide for reporting it.

How a hidden Bluetooth vulnerability triggered a cross-platform malware outbreak that shut down a small business — and what every company…

Ahh… the hard password challenges. Where Hashcat slowly eats away at your soul, and the electricity bill arrives with a condolence card…

We tend to imagine hackers as hoodie-wearing geniuses typing at lightspeed in a dark room, but in reality Most hacks don’t require elite…

Simple Tool Became My Secret Weapon for Cracking Tough Cases

FourCore started in a college dorm room during the pandemic and has since grown into a cutting-edge red teaming platform trusted by…

I left stable distros for Arch Linux. Here is how building my OS from scratch taught me more about Linux internals than any textbook.

After discovering that reconnaissance commands had spotty detection in my previous tests, I expected persistence mechanisms to fare better…

I spent today working through a routing lab in GNS3 where I compared static routing and OSPF (Open Shortest Path First) across a small…

Photo by Markus Spiske on Unsplash

Designed and Implemented by JB