The Reality Check I Needed

Using a security information and event management (SIEM) platform, in this case, Splunk, we can rapidly query historical logs to turn…

Hi, I’m Atakan. I work as a Security Researcher at HackerOne, and I recently identified a simple, yet highly impactful vulnerability that…

DOM-based XSS where location.search is written into the page via innerHTML, letting us inject HTML and trigger alert(1) using an SVG onload…

Cloudflare's Q3 2025 DDoS Threat Report reveals the Aisuru botnet launched a record 29.7 Tbps attack. Learn which sectors were the most targeted, and the key drivers behind the surge in attacks.

Assalamualaikum everyone!
It’s been a while since I shared any of my bug bounty findings. I’ve been diving deep into new technologies…

My first bug was a metadata leak and it might be yours true if you searched api’s because they are easier to find and verify if they are…

Hi, I’m Atakan. I work as a Security Researcher at HackerOne, and I recently identified a simple, yet highly impactful vulnerability that…

In my previous post, we talked about Android VAPT Basic Overview.

Windows remains the most targeted operating system in the world, making it essential to understand how attackers break into it. Hackers…

Odysafe CTI Platform : l’outil open-source qui simplifie vraiment la gestion des IOCs

Après plusieurs années d’utilisation de Wazuh en complément d’une solution XDR, voici un retour d’expérience simple et honnête sur ce que…

I’m in Phase One of my homelab setup — which is all about building a deliberately vulnerable infrastructure to learn to detect and defend…

Encryption is a fundamental security process that transforms human readable data (aka “plaintext”) into an unreadable\scrambled format…

How a single forgotten artifact corrupted a forensic workstation and why environmental hygiene is non-negotiable in Incident Response.

Say goodbye to convenience as new security rules force a 6-hour logout timer on your laptop and chain your apps to your physical SIM card.

Bu makine, siber güvenlikte “Bilgi Toplama” (Enumeration) aşamasının ne kadar kritik olduğunu kanıtlayan bir laboratuvar ortamıdır…

The financial sector has undergone a dramatic digital transformation over the past decade. Banking, insurance, payments, lending, and…

This article presents a structured penetration testing report based on the analysis of the TryHackMe machine ‘Bounty Hacker’. The…