A building may look perfect on the outside modern architecture, premium materials, and impressive interiors. But once occupants move in…

Understand how SOC analysts investigate logs using Splunk.

Github link: https://github.com/kimberlykuya/ssh-bruteforce-detection

Web challenges in CTFs often test a fundamental principle:

Hey, I’m Amrul. I work as a Security Engineer, and in my free time I do bug bounty on YesWeHack. At the end of 2025, I found multiple…

The 22 prompts top hunters use to extract elite-level thinking from ChatGPT, Claude, Gemini, and DeepSeek — organized, searchable, and…

Step 1: Register

Step 1: Register

DOM Based Open Redirection is a type of security vulnerability that occurs when an attacker-controlled source is written into a redirect…

A Living Off the Land Recipe for Shellcode Obfuscation

Bu yazımda sizlerle TryHackMe platformunda bulunan Linux Temelleri Part 1 isimli odanın çözümünü paylaşacağım.

When I first heard about Nmap, I thought it was some “hacker tool” used only by professionals. But when I started learning cybersecurity as…

No Tools, Just Thinking: 3 Bugs I Found Manually Chaining Logic Flaws: Method Tampering, URL Bypass & Hidden Data Leaks

Before you attack — you map. Here’s how beginners should start.

A practitioner guide to role design, data scope, and access reviews that reduce fraud risk without breaking finance operations.

a walkthrough on log hunt ctf

There are many techniques to map private network cameras to public access.

Every enterprise I’ve worked inside had 60+ security tools. Threat intel platforms. SIEMs. SOAR playbooks. EDR agents. Red team frameworks…

92.3% Success Rate — Surpassing XBOW and Most Human Pentesters

SSRF, Server-Side Request Forgery: Exploiting a vulnerable avatar fetching feature using directory traversal to force the server to access…