A missing permission check in Grafana 13.2 lets signed-in users read SSO client secrets and change login settings.

Lab Link: Startup

By Zoningxtr

A beginner-friendly walkthrough covering LFI discovery, FFuF fuzzing, directory traversal, and flag retrieval.

Platform: TryHackMe Room: Break Out The Cage Difficulty: Easy

An honest, practical guide to understanding cybersecurity, finding the right career path, and building the skills that can actually help…

Ever thought your CI/CD pipeline might be the weakest link in your organization’s security? Over 80% of supply chain attacks exploit…

Clickjacking nedir?

I passed the Certified Red Team Analyst (CRTA) exam by CyberWarFare Labs on October 25, 2026. It cost me $9 with a 90% discount, down from…

In a world driven by technology, cybersecurity is no longer optional. Every website, mobile application, API, and network can become a…

Introduction

قَالُوا سُبْحَانَكَ لَا عِلْمَ لَنَا إِلَّا مَا عَلَّمْتَنَا ۖ إِنَّكَ أَنتَ الْعَلِيمُ الْحَكِيمُ

This week, the focus shifted from the power of AI models themselves to the vulnerabilities in their surrounding environment: extension…

DutyBound HTB — From a Boarding Pass to Root

An investigation into attacks targeting South Korean financial institutions shows how AI agents are changing offensive cybersecurity, and…

Box: Jarvis Difficulty: Medium

A security analyst sees a strange domain in an alert at 7:42 on a Tuesday morning. Is it malicious? Is it tied to an incident another…

A hands-on lab walkthrough against PHP and Java web targets

APIs are one of the most important components of modern web applications. They connect front-end interfaces with back-end services, handle…

يَرْفَعِ ٱللَّهُ ٱلَّذِينَ ءَامَنُوا۟ مِنكُمْ وَٱلَّذِينَ أُوتُوا۟ ٱلْعِلْمَ دَرَجَـٰتٍ ۚ وَٱللَّهُ بِمَا تَعْمَلُونَ خَبِيرٌ

My first attempt at the PT2 exam landed me a score of 858 out of 1000 (about 85.8%). The passing mark is 740 (74%), so I cleared it with…