I Scanned My Home Network. Then I Found Devices I Forgot Existed.
What started as a simple Nmap scan turned into a reminder that your attack surface is usually bigger than you think. Continue reading on Medium » What started as a…
Graphite: The Israeli Spyware That Can Hack Your Phone Without You Clicking Anything
There was a time when staying safe online meant following a simple rule: don’t click suspicious links. Continue reading on Medium » There was a time when staying safe online…
Hardening against CSV Injection in Umbraco
Hello, long time no blog. It has certainly been a while but I am still doing penetration testing. Continue reading on Medium » Hello, long time no blog. It has…
I Spent 24 Hours Using Only Free Cybersecurity Tools
No expensive subscriptions. No enterprise dashboard. Just open-source tools, a terminal, and enough curiosity to make my laptop question… Continue reading on Medium » No expensive subscriptions. No enterprise dashboard.…
How to Ace the Modern Cybersecurity Interview: SIEM, GRC, and Hands-On SecOps
The cybersecurity hiring landscape has undergone a seismic shift. Gone are the days when landing a role as a SOC Analyst, GRC Specialist… Continue reading on Medium » The cybersecurity…
Web Application Penetration Testing CTF 1
Hello folks! Today we’ll be discussing about one more CTF challenge of the Web Application Penetration Testing as always I’ll not share… Continue reading on Medium » Hello folks! Today…
Writing Your First PIC Shellcode with Crystal Palace
The previous post covered what Crystal Palace is and why it exists. This one is hands-on. We’re building two PICOs from scratch, a… Continue reading on Medium » The previous…
24/7/365 Cyber Security Operations Center (CSOC) – At Smatchoicehackers.com
cybersecurity-center Continue reading on Medium » cybersecurity-centerContinue reading on Medium » Read More Hacking on Medium #hacking
Why Your Best XSS Is on a Param You Can’t See
What’s up everyone! Nitin here 👋 Continue reading on Medium » What’s up everyone! Nitin here 👋Continue reading on Medium » Read More Hacking on Medium #hacking
Ngrok Tutorial: Complete Guide from Beginner to Advanced — Installation, Configuration, Tunnels…
ngrok is one of the easiest tools for exposing a local application or development server to the internet through a secure public endpoint… Continue reading on Medium » ngrok is…
Wat te doen als ik gehackt ben?
Denk je dat je gehackt bent? Blijf rustig, maar kom direct in actie. Stap voor stap: zo beperk je de schade aan je accounts, computer of… Continue reading on Medium…
EC-Council Free Cybersecurity Courses, CTF Challenges & Certificates: Complete Guide 2026
If you are looking for free cybersecurity courses, ethical hacking training, CTF challenges, hands-on labs, and cybersecurity course… Continue reading on Medium » If you are looking for free cybersecurity…
Rooted Walkthrough
Rooted was a well‑crafted machine that deliberately hid the entry point behind a simple information leak and then used a single… Continue reading on Medium » Rooted was a well‑crafted…
How I Chained an Unauthenticated OAuth Registration Endpoint into Full Account Takeover
A walkthrough of abusing RFC 7591 Dynamic Client Registration left open in production Continue reading on Medium » A walkthrough of abusing RFC 7591 Dynamic Client Registration left open in…
Unauthenticated Mass Data Deletion: When DELETE Has No Auth Check
Finding and proving a cross-user resource deletion vulnerability through JS bundle analysis and sequential ID enumeration Continue reading on Medium » Finding and proving a cross-user resource deletion vulnerability through…
درود به شهباز بلیز و دلتاسک، دو نامی که این روزها در دنیای امنیت و ماجراجوییهای دیجیتال، طنینی آشنا…
شهباز بلیز و دلتاسک Continue reading on Medium » شهباز بلیز و دلتاسک Continue reading on Medium » Read More Hacking on Medium #hacking
RCE in 2026 Doesn’t Look Like RCE in 2020. Here’s What Actually Matters Now.
30-second version: I compared the RCE reports that defined 2018–2021 bug bounty with what’s getting disclosed in 2024–2026. The attack… Continue reading on Medium » 30-second version: I compared the…
Black Hat 2026: A Browser Bug Alone Is Harmless. Hand It to an AI Agent, and It Isn’t.
Research presented this week shows a new attack class where old, familiar browser quirks become account-takeover chains the moment an AI… Continue reading on InfoSec Write-ups » Research presented this…
Offensive Active Directory: 12 Hands-On Techniques Every Red Teamer Should Master
Ever wonder why some pentesters breeze through Active Directory environments like it’s a walk in the park, while others get stonewalled at… Continue reading on Medium » Ever wonder why…
Grafana Security Alert | CVE-2026–15583 & CVE-2026–21723 Explained
Two Recent Grafana Security Issues Every Security Team Should Understand Continue reading on Medium » Two Recent Grafana Security Issues Every Security Team Should UnderstandContinue reading on Medium » Read…