I studied cybersecurity in college, but if I’m being honest, I didn’t make the most of that time.

Introduction

Cepteki Truva Atları

Breach databases show you the past. Stealer logs show you the present.

Hello, stranger — let’s begin.

A Medium difficulty room covering WordPress exploitation, Metasploit, privilege escalation via SUID binary, and flag hunting.

Privilege Escalation: How a Single Misconfigured Permission Can Bring Down an Entire Domain

A practical story of how automated recon, historical URL mining, and careful testing led to a Medium-severity Reflected XSS — responsibly…

The patterns I found across hundreds of bug bounty programs — and what they reveal about the conditions that produce vulnerabilities

From A Young Teen — To A Programmer !!

Bilgisayar ağlarını anlamadan siber güvenliği anlamak mümkün değildir. Çünkü tüm saldırılar, savunmalar ve veri alışverişi ağ üzerinden…

⚠️ Disclaimer: This writeup and walkthrough video are published after the CTF event completion for educational and research purposes. The…

In today’s digital environment, social media management is no longer a secondary marketing activity — it has become a core business…

Introduction:

Your production environment should be isolated from your non-production environments. In fact, every application environment should be…

Building and Hardening a Flask AppSec Authentication Lab

We don’t knock. We never did.

In today’s internet, privacy isn’t a feature, it’s a fight. Trackers, advertisers, data brokers, and even ISPs quietly map your behavior…

From a single breach scare to TOTP for everyone — here’s the business story and the technical decisions behind it.

A seven-stage fileless chain from mshta.exe to a custom C2 implant that steals credentials from seven browsers and hides behind facebook.com

A Complete Kill Chain: From WPA2 Handshake Capture to Router Compromise