AUAbdulmujeeb Uthmanindevwithmujeeb.hashnode.dev·5d ago · 5 min readHow We Built a Centralized Security Monitoring Environment for a Healthcare Supply Chain Company The Brief MedCore Logistics is a simulated healthcare supply chain company with a real problem: no centralized visibility across its endpoints and cloud infrastructure. No one knew what was happening 00
Rrathsarainrr-cyber.hashnode.dev·Sep 5 · 7 min readAnonTestLab: Ten Years, Three Attempts, and One Idea That Wouldn't Let GoTL;DR: the tool is at hashtagrr.github.io/AnonTestLab. The rest of this is how it came to exist. Round one: an idea and no coding experience to build it I got my hands on the Tor Browser almost ten y00
Rrathsarainrr-cyber.hashnode.dev·Sep 3 · 11 min readWindows Memory Forensics: Finding a Live Infection with VolatilityPID 1484 had been running since boot. Nothing about that was unusual: it was Explorer.exe, the process every Windows machine on earth is running right now. What was unusual was the process hanging off00
Rrathsarainrr-cyber.hashnode.dev·Sep 3 · 9 min readGNU/Linux Memory Forensics: Is the Compromise Still Live?It's easy to think of memory forensics purely as a hunt for something malicious. On this case, a GNU/Linux server that had already been through a full attack chain, initial access, privilege escalatio00
Rrathsarainrr-cyber.hashnode.dev·Aug 31 · 19 min readOpenID Connect: The Identity Layer OAuth Was MissingBy the time I actually heard the word OIDC, I'd already been through OAuth and PKCE conversations I hadn't fully understood, years apart from each other, and this one arrived even later than those. It00
4F404 Foundersin404-founders.com·Aug 19 · 3 min readDahua CVE-2021-33044: 14,500 Cameras HackedDahua CVE-2021-33044: 14,500 Cameras Hacked Threat intelligence firm Hunt.io uncovered a 35-day campaign, dubbed Operation CameraSwarm, that compromised more than 14,530 Dahua IP cameras between June 00
4F404 Foundersin404-founders.com·Aug 18 · 4 min readMicrosoft Copilot CVE-2026-24301: One-Click Data TheftMicrosoft shipped a fix on August 18, 2026 for three chained bugs in Microsoft Copilot Personal, after security firm Varonis found that one crafted link was enough to make Copilot quietly pull data ou00
Rrathsarainrr-cyber.hashnode.dev·Aug 15 · 10 min readWhat We Got: From Cloud Security Platform to Operational CapabilityA few months after the operationalizing work covered in the last article, it stopped being a project. It became part of how we worked. This article is about what changed once that happened. The Metri00
Rrathsarainrr-cyber.hashnode.dev·Aug 14 · 31 min readUnderstanding OAuth 2.0: Delegation, Grant Types, and the Attacks That Actually HappenThe first time I heard the term OAuth, I didn't know what it meant. I was in a conversation with a DBA lead about something adjacent to authentication and authorization, and he mentioned, almost in pa00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 10 · 35 min readTryHackMe : Overflow The Jackpot writeup# Challenge Category Flag 1 B1t Recovery Crypto THM{[REDACTED]} 2 Lost Fortune Included Web THM{REDACTED} 3 Casino Heist Forensics THM{REDACTED} 4 Fresh Powder - Bonus Challenge Detection Eng10
