Cybersecurity

Understanding the Cyber Kill Chain Continue reading on Medium »

Understanding How Mobile Identity Works in Modern Telecom Networks Continue reading on Medium »

On 19/6/2026, riffhack.biterra.co hosted an online CTF. The event had two types of challenges, what I’ll call normal and RIFFHACK… Continue reading on Medium »

Look. I was writing Python scripts before your favorite framework even existed. I’ve watched the internet go from a place where anonymity… Continue reading on M

Look. I was writing Python scripts before your favorite framework even existed. I’ve watched the internet go from a place where anonymity… Continue reading on M

Category: Access Control Vulnerabilities Difficulty: Apprentice Continue reading on Medium »

In this lab, the website has a DOM-based XSS vulnerability in the submit feedback page. Continue reading on Medium »

I almost closed the file without reading it. Three days later I was killing processes in production at 2am, rotating every credential I… Continue reading on Med

I almost closed the file without reading it. Three days later I was killing processes in production at 2am, rotating every credential I… Continue reading on Med

Documenting Undocumented WriteProcessMemory Behavior Continue reading on Medium »

OAuth has a reputation for being complicated, mysterious, and slightly annoying. To be fair, it has worked hard to earn that reputation. Continue reading on Med

Atomic Arch (Sonatype-2026–003775) backdoored around 1,500 AUR packages on June 11–12, 2026. The credential stealer it ships is… Continue reading on Medium »

I’ve taught cybersecurity to enough beginners now to know that the term “CIA Triad” sounds like it belongs in a spy movie, not a textbook… Continue reading on M

Most of my recent work has been offensive or IR-focused tracing a fileless malware infection through an Active Directory lab, running… Continue reading on Mediu

For the last few years, I’ve been working on a problem that sits between cybersecurity, mathematics, and large-scale systems : Can… Continue reading on Medium »

When new students start learning ethical hacking, almost all of them want to skip straight to the exciting part: running a scan, finding a… Continue reading on

A follow‑up to the 3‑Part Comparative Series. Part 3 mapped the conceptual bridge between IACS UR E26/E27 and the U.S. Coast Guard’s new… Continue reading on Me

What is RDP? Complete Beginner's Guide (2026) Continue reading on Medium »

The attack that exploits trust to make you do things you never intended Continue reading on Medium »

What’s up everyone!  So this is my very first writeup on Medium, and I figured why not kick it off with the Anonymous room on TryHackMe… Continue reading on Me

Category: Access Control Vulnerabilities Difficulty: Apprentice Continue reading on Medium »

How Attackers Abuse Perfectly Working Features Without Hacking the Code Continue reading on Medium »

WhatsApp Plus means two different things in 2026. Here is the full breakdown of the official Meta subscription, the unofficial mod APK… Continue reading on Medi

A Room Where Everyone Was a Ghost Continue reading on Medium »

How a simple “encrypted message” demo turned into a real lesson in what end-to-end encryption actually means — and the mistakes along the… Continue reading on M

With the domain controller fully operational and the cyber lab network established, the next step was to integrate a client workstation… Continue reading on Med

With the network infrastructure now in place via pfSense, the next phase of the project focuses on configuring the systems that make up… Continue reading on Med

Java applications often need to perform repetitive transformations when reading from or writing to a database. Common examples include: Continue reading on Medi

My writeup for the Beginner picoMini 2022 challenges! It consists of pretty simple general skills challenges that serve as a good starting… Continue reading on

1. Overview Continue reading on Medium »

AI scams move fast because panic moves fast. This simple pause can protect your money, accounts, and identity before one click gives… Continue reading on Medium

Continue reading on Medium »

I investigate Network PCAP file on the Wireshark. Continue reading on Medium »

https://tryhackme.com/room/neighbour Continue reading on Medium »

Spend enough time reading federal law, and you start to notice something odd. The word “cybersecurity” is everywhere. It funds programs… Continue reading on Med

A story about trust, panic, and why the next family crisis you see on video may not be real. Continue reading on Medium »

The End of the “Castle and Moat”: Why Zero Trust is Today’s Most Relevant Security Mandate Continue reading on Medium »

Continue reading on Medium »

This report consolidates all captured browser‑level, network, and vault telemetry from your recent sessions. Continue reading on Medium »

Phase 1: Reconnaissance (Recon) Continue reading on Medium »

Stepping into the world of cybersecurity can feel like trying to drink water from a firehose. Between confusing acronyms, complex tool… Continue reading on Medi

Personal Reflection on Security & Risk Management Concepts Continue reading on Medium »

Question 1; Continue reading on Medium »

When you’re first learning to build databases, storing a password as plain text feels natural. It’s right there, it’s easy to test, and… Continue reading on Med

Digital forensics challenges are rarely about a single artifact. They are about connecting small traces across memory, disk, applications… Continue reading on M

It Looked Like Amazon. It Ran on Bitcoin. And It Became One of the Biggest Cybercrime Stories Ever. Continue reading on Medium »

Introduction Continue reading on Medium »

IRQLs → KDPC internals → WinDbg live analysis → vulnerable driver code → ROP-based exploitation → BYOVD → mitigations breakdown Continue reading on Medium »