Cybersecurity

In March 2025, a North Korean spy crew emailed activists a poster, the download link pointed to Dropbox, and so did every secret command… Continue reading on Me

The Sovereign Clean-Pipe Protocol Continue reading on Medium »

By default, crowdsec-firewall-bouncer injects its own chain into iptables. That works fine on a simple system where nothing else is… Continue reading on Medium

Atomic Arch (Sonatype-2026–003775) backdoored around 1,500 AUR packages on June 11–12, 2026. The credential stealer it ships is… Continue reading on Medium »

I’ve taught cybersecurity to enough beginners now to know that the term “CIA Triad” sounds like it belongs in a spy movie, not a textbook… Continue reading on M

Most of my recent work has been offensive or IR-focused tracing a fileless malware infection through an Active Directory lab, running… Continue reading on Mediu

For the last few years, I’ve been working on a problem that sits between cybersecurity, mathematics, and large-scale systems : Can… Continue reading on Medium »

When new students start learning ethical hacking, almost all of them want to skip straight to the exciting part: running a scan, finding a… Continue reading on

A follow‑up to the 3‑Part Comparative Series. Part 3 mapped the conceptual bridge between IACS UR E26/E27 and the U.S. Coast Guard’s new… Continue reading on Me

What is RDP? Complete Beginner's Guide (2026) Continue reading on Medium »

The attack that exploits trust to make you do things you never intended Continue reading on Medium »

What’s up everyone!  So this is my very first writeup on Medium, and I figured why not kick it off with the Anonymous room on TryHackMe… Continue reading on Me

The UK cybersecurity job market is booming, but many career changers and beginners struggle to understand where demand truly lies ,which… Continue reading on Me

Note: The target’s name has been withheld and replaced with example.com, since this report is still under responsible disclosure / private… Continue reading on

Why the best hackers start in total silence: A deep dive into passive footprinting, threat intelligence search engines, and defensive… Continue reading on InfoS

Shellshock is one of those bugs that everyone in security has heard of, but a lot of younger workflows only know it as a story. Continue reading on Medium »

Category: Access Control Vulnerabilities Difficulty: Apprentice Continue reading on Medium »

How Attackers Abuse Perfectly Working Features Without Hacking the Code Continue reading on Medium »

WhatsApp Plus means two different things in 2026. Here is the full breakdown of the official Meta subscription, the unofficial mod APK… Continue reading on Medi

A Room Where Everyone Was a Ghost Continue reading on Medium »

NoSQL injection is an attack where we slip extra characters or commands into the input that gets sent to the database. In this lab, the… Continue reading on Med

How a simple “encrypted message” demo turned into a real lesson in what end-to-end encryption actually means — and the mistakes along the… Continue reading on M

With the domain controller fully operational and the cyber lab network established, the next step was to integrate a client workstation… Continue reading on Med

With the network infrastructure now in place via pfSense, the next phase of the project focuses on configuring the systems that make up… Continue reading on Med

Java applications often need to perform repetitive transformations when reading from or writing to a database. Common examples include: Continue reading on Medi

Email security architectures usually require complex deployments: MX record modifications, third-party mail gateways, or dedicated servers… Continue reading on

My writeup for the Beginner picoMini 2022 challenges! It consists of pretty simple general skills challenges that serve as a good starting… Continue reading on

1. Overview Continue reading on Medium »

AI scams move fast because panic moves fast. This simple pause can protect your money, accounts, and identity before one click gives… Continue reading on Medium

Continue reading on Medium »

I investigate Network PCAP file on the Wireshark. Continue reading on Medium »

https://tryhackme.com/room/neighbour Continue reading on Medium »

Spend enough time reading federal law, and you start to notice something odd. The word “cybersecurity” is everywhere. It funds programs… Continue reading on Med

https://tryhackme.com/room/corridor Continue reading on Medium »

A story about trust, panic, and why the next family crisis you see on video may not be real. Continue reading on Medium »

The End of the “Castle and Moat”: Why Zero Trust is Today’s Most Relevant Security Mandate Continue reading on Medium »

Continue reading on Medium »

This report consolidates all captured browser‑level, network, and vault telemetry from your recent sessions. Continue reading on Medium »

Phase 1: Reconnaissance (Recon) Continue reading on Medium »

Stepping into the world of cybersecurity can feel like trying to drink water from a firehose. Between confusing acronyms, complex tool… Continue reading on Medi

Personal Reflection on Security & Risk Management Concepts Continue reading on Medium »

Question 1; Continue reading on Medium »

When you’re first learning to build databases, storing a password as plain text feels natural. It’s right there, it’s easy to test, and… Continue reading on Med

Digital forensics challenges are rarely about a single artifact. They are about connecting small traces across memory, disk, applications… Continue reading on M

It Looked Like Amazon. It Ran on Bitcoin. And It Became One of the Biggest Cybercrime Stories Ever. Continue reading on Medium »

Introduction Continue reading on Medium »

IRQLs → KDPC internals → WinDbg live analysis → vulnerable driver code → ROP-based exploitation → BYOVD → mitigations breakdown Continue reading on Medium »

Introduction Continue reading on Medium »