An awareness-based analysis of a real Android malware incident

Labs, Rooms, and CTF References (With Short Tactical Notes)

A critical vulnerability I found was rejected simply because the affected asset was labeled “third-party / out of scope” — even though it…

hey there,

ANTHEM Target — THM Writeup

Machine Name: Agent Sudo

In this article, I’m speaking about the experience of completing the eLearning Professional Penetration Testing exam from INE Security at…

Encryption is often treated like a magic shield.

A high-level overview of how attackers control compromised systems and how defenders try to break that control.

Hello fellow readers! A very Happy New Year to you and your loved ones.

Bangladesh’s cybersecurity regime has undergone a fundamental reset. As of January 2026, the governing framework is the Cyber Security…

Hey,

In bug bounty hunting, when automated scanners fail and the scope is narrow, your best weapon is your own eyes. Today, I’ll share how I…

We treat images as harmless visuals, but under the hood, they are data containers waiting to be exploited. Here is how the invisible layer…

Welcome to HTB Hacknet, a Hard-difficulty machine on Hack The Box that tests your ability to read the developer’s mind. This is a…

Introduction
 Despite widespread adoption of encrypted protocols, misconfigurations and legacy services can still expose sensitive data in…

Understand how SQL injection attacks work and how to exploit this vulnerability.

Long time no see~ Halo semua, sudah hampir 3 tahun saya tidak menulis write up tentang finding saya di dunia bug hunting dan CyberSecurity karena saya sendiri beberapa tahun kebelakang tidak terlalu …

In the ever-evolving landscape of cybersecurity, few vulnerabilities pose as pervasive and dangerous a threat as Broken Access Control…

Insights from testing real-world Bluetooth, Wi-Fi, and proprietary wireless protocols

De la fuerza bruta al Análisis de Segundo Orden. La historia del Proyecto 3t y cómo rompimos AES explotando el ruido y el tiempo.