Dec 8, 2025 · 2 min read · 💀 Same Origin Policy (SOP) Hey there! In this post, we’ll dive into the Same Origin Policy (SOP) — a crucial web security mechanism designed to prevent malicious attacks and protect user privacy. 🧠 What is SOP? Same Origin Policy (SOP) is a securi...
Join discussion
Oct 28, 2025 · 3 min read · Stop Using Pre-Made Google Dorks – Think Like a Real Bug Hunter Google Dorking is a powerful technique. When used properly, it can turn a basic search engine into a full-fledged reconnaissance tool. But if you’re just copying dork lists from GitHub o...
Join discussion
Oct 4, 2025 · 25 min read · Executive Summary: Fast-Flux isn’t sorcery, it’s smart DNS abuse. Attackers rotate a domain through dozens or hundreds of IP addresses (often infected hosts) to obscure the true command-and-control or phishing backend. Think of it as a constantly sh...
Join discussion
Sep 28, 2025 · 2 min read · Poison is an easy FreeBSD machine that introduces attackers to BSD systems and demonstrates privilege escalation through VNC service exploitation. The attack path involves PHP file inclusion, credential decoding, and VNC port forwarding. ## Reconnai...
Join discussion
Aug 10, 2025 · 5 min read · It was many hours after dusk and devoid of light. Torrential rain down poured as tentacles of lighting snatched out across the sky while thunder was booming in the background. Inside his lab, a computer scientist on the verge of madness panted heavil...
Join discussion
Jul 24, 2025 · 3 min read · What is Caldera? Caldera is an adversary emulation platform. I will be using it to simulate attacks in my home lab to gain a better understanding of my Splunk environment. I have previously written about Installing Splunk in my home lab, this will en...
Join discussion
Apr 6, 2025 · 2 min read · Các bước cài đặt: Yêu cầu phần cứng: Bộ định tuyến GL.iNet MT300N v2 (Mango) bộ này mình mua shope hoặc lazada giá tầm 7-800k. Bộ adapter Wi-Fi có thể xem tại đây về chipset https://www.youtube.com/watch?v=XaxLYe5j79U. Tải firmware: Truy cậ...
Join discussion
Jan 24, 2025 · 4 min read · Have you ever wondered how much of your personal information has been circulating the web? If it ever made you go “Oh, I wonder what people will do with just my username. They wouldn’t really be able to do much with it anyway”, then this article is j...
Join discussion
Dec 15, 2024 · 2 min read · Kali ini kita akan berkenalan dengan yang namanya ART, jadi apa itu ART? ATOMIC RED TEAM adalah sebuah library open source untuk melakukan uji keamanan yang dipetakan berdasarkan framework MITRE ATT&CK. MITRE ATT&CK adalah sebuah framework yang digu...
Join discussionOct 14, 2024 · 3 min read · Active Directory (AD), a core service for managing users and permissions in Windows domains, can be a complex beast. Understanding the intricate web of relationships between users, groups, and computers is crucial for maintaining a secure network. Th...
Join discussion