SQLMap is a powerful open-source tool for finding and taking advantage of SQL injection vulnerabilities in web applications. If you’ve been…

When Google Isn’t Enough: Let’s Footprint Like Pros 🕵️‍♂️

When it comes to protecting data and infrastructure, cybersecurity leaders often debate two foundational philosophies: Zero Trust and Trust…

Di Part 2, kita telah mengupas tuntas tentang pentingnya pola pikir keamanan yang proaktif, beragam peran vital dalam tim cybersecurity…

Di Part 1, kita telah membahas fondasi penting dalam cybersecurity: dari memahami dasar-dasar, jenis-jenis ancaman, hingga pentingnya…

Hello, I’m the Big Uncle In Lagos and you’re welcome to my blog. Here I’d be updating you on all my findings on network and cloud security…

Listen to an Audio Summary [16:54 mins HERE]

While testing one of the web applications in a Bug Bounty program, I discovered a CORS misconfiguration that could allow attackers to access sensitive user data or internal API responses by abusing…

We talk a lot about tech stacks — front-end frameworks, back-end infrastructure, third-party integrations.

A critical Tenda W18Ev2 router flaw allows unauthenticated RCE via admin password change. PoC available, no patch yet.

Argo CD, the widely adopted GitOps continuous delivery tool for Kubernetes, has issued a high-severity security advisory addressing a critical cross-site scripting (XSS) vulnerability. This vulner…

Redis versions 7.0+ are vulnerable to RCE via a stack buffer overflow in redis-check-aof. Update to 8.0.2, 7.4.4, or 7.2.9.

Abusing Email-Based Ticketing to Impersonate Users and Bypass Identity Controls — Earned $1,000

This one is very simple and straight forward, we already learned about the vulnerability we will find in the module but to tell you the…

☣️ Introduction — This article details the reverse engineering process of a multi-stage obfuscated Java JAR file. Here, we explore each…

With the rapid development of technology, almost all of our daily activities are connected to the internet. Studying, ordering food through…

Bringing CISSP to Life Through Iconic Fictional Characters

When Cybercriminals Turned Inbox Manipulation Into Corporate Collapse

In today’s digital era, cyber security has emerged as one of the most crucial fields, safeguarding individuals and organizations from…

Kini saya berkomitmen untuk mendalami jalur Blue Team, dan artikel ini adalah rencana 5 tahun saya dari 2025 hingga 2030 untuk…

Dunia cybersecurity itu kayak film action, ada tim biru (Blue Team) yang bangun benteng pertahanan, dan ada tim merah (Red Team) yang…