Navigating the Shadows: A Comprehensive Guide to Entering the Dark Web

We all like finding complicated bugs — the kind that takes days to figure out and makes you feel like a genius hacker. But sometimes, the…

Every SOC analyst knows this moment if you've been in the industry for a while.

One stolen token can destroy a production system faster than any zero day exploit.

When most people hear the word “hacker”, they imagine someone in a dark room typing furiously on a keyboard. That image is dramatic, but it…

A Simple Mental Model Most Defenders Ignore

A Web Hacking Tool

https://tryhackme.com/room/ignite

This CTF focuses on subdomain enumeration — a critical reconnaissance technique used to discover hidden services and potential attack…

After opening the lab, I put the basic alert payload into the search bar and after putting search we got the alert function that lets us…

Welcome to this new Medium post! In this one we’re gonna mess around with something pretty cool: RPC (Remote Procedure Call), basically the…

A story about why “secure” networks still fail, and why most defenses are pointed in the wrong direction.

A series of articles focused on freely available hacking tools, in this edition we look at the web recon tool Dirb.

সাইবার সিকিউরিটি এবং পেনিট্রেশন টেস্টিংয়ের জগতে একটি বহুল প্রচলিত কথা আছে — “আপনি যা দেখতে পাচ্ছেন না, তা আপনি হ্যাক করতে পারবেন না।” এই…

A step-by-step TryHackMe walkthrough covering enumeration, token impersonation, and Windows privilege escalation using PrintSpoofer.exe

Cybersecurity is best learned by doing, not just reading. This capstone project challenged me to step into the mindset of an attacker while…

From SSRF and SSTI to Erlang cookie theft and root compromise.

In a standard SQL injection, the database often spits out helpful error messages or direct data. But what happens when the application is…

Welcome to the Network (the name I have still yet to decide).

⚠️All testing described below was performed in a fully isolated lab environment for educational and defensive research purposes only. No…

This is for educational purposes only! Do not use unless authorized.