#hacking

Building a Lightweight Enterprise SOC Lab with Splunk, Sysmon & MITRE ATT&CK

How I built a practical SOC laboratory using VMware, Splunk Enterprise, Windows Server, Sysmon, Kali Linux, MITRE ATT&CK, automated…

Phone and Device Access: Can You Read Your Spouse’s Text Messages or Emails?

Phone and Device Access

Building a Practical Windows Threat Detection Lab with Wazuh, Kali Linux, and Ubuntu

From Attack Simulation to SIEM Detection: An End-to-End Cybersecurity Monitoring Lab

BOLA: Enumerating an Entire Employee Directory Through a Predictable ID

By Sid — Cybersecurity Engineer & Pentester

I Made a $4 Raspberry Pi Pico Pretend to Be a Keyboard. My Computer Believed It.

A tiny microcontroller, one USB cable, and a harmless experiment taught me more about USB HID, device trust, and hardware security than I…

From LFI to RCE: Chaining Multiple Vulnerabilities in an HTB Academy Skill Assessment

During this assessment, I started by testing the target web application for Local File Inclusion (LFI) vulnerabilities.

Malicious Hack Sweeps Campus

Accusations of sexual harassment run rampant

Resetting the Admin’s Password Without Touching Their Inbox

By Sid — Cybersecurity Engineer & Pentester

The Tool That Ends Arguments in Network Engineering

A long-form guide to Wireshark — and why every engineer should be fluent in it

Card Declined? So Was Your Subdomain | Featurebase as an Undercovered Subdomain Takeover Vector

Featurebase is an SaaS designed to help companies and enterprise corporations effectively deal with customer support and allow for an easy…

Why Browser-Based AR Is Still a Dead End for Indie Creators

What I learned the hard way trying to make WebAR and Three.js work on mobile.

Session Hijacking

If you work with systems that expose APIs — whether a classic web application or a backend serving an LLM agent — there’s a class of bugs…

Session Hijacking: The Silent Takeover

Why stealing a session can be more valuable than stealing a password.

The A-Z of hacking

If you are one of my brethren in India, I will assume you are aware with the hacking of the national bank of baroda, in which consumer…

Rootless Android Modding: Redefining What’s Possible Without Root

Exploring Shizuku, LSPatch, and LSPosed modules to modify Android apps without unlocking the bootloader or rooting your device.

Pwning HaveIBeenPwned: Part 1

Lets deep dive into the HaveIBeenPwned Dataset! (Obligatory: JP taught me most things I know about password cracking ♥️ )

Cyber Security Is Not Just Hacking. Here Are the Real Paths and How to Choose Between Them.

Parul University, Vadodara, Gujarat, India

📓 THE SECRET JOURNAL OF NOOB.0

The Classified Documentation — That I Desperately Needed.

CS2 Cheats: Analysis of Features and Security of the Cluster Utility

The landscape of Counter-Strike 2 has evolved significantly since transitioning to the Source 2 engine. With the launch of the updated VAC…

TryHackMe | The Hollow Shell | Hacker Holidays 2026 | Medium | Web

Concierge Briefing

No Network Required: When Nyquist Met Real Hardware — Part 2

Recovering a Near-Ultrasonic Acoustic Channel with Python

Kena Session Cookie Stealer: Reset PC Saja Ternyata Gak Cukup! Ini Langkah Pengamanan yang Benar

Pernah gak bayangin: PC kamu tiba-tiba kena malware infostealer seperti akun discord mengirim giveaway scam ke semua server atau teman…

Inside the Radio Spectrum of a Smart Home

Exploring how Zigbee, Bluetooth, Wi-Fi, LoRa, and proprietary protocols coexist — and where security gaps emerge.

Detailed Review of the Cluster Cheat for CS2: Legit Technologies, Security, and the Response to…

Detailed Review of the Cluster Cheat for CS2: Legit Technologies, Security, and the Response to Neverlose Updates

Обзор чита Cluster для CS2: Технологии легита, безопасность и ответ на обновления Neverlose

Ознакомившись с популярным материалом на Medium под названием «Top cheats for CS2: The best hack» от автора mrkhertz, я решил подготовить…

No Network Required: Building an Acoustic Data Channel with Python for data exfil — Part 1

Beyond the Air Gap — Part 1

🧠 BloodHound From Beginner to Pro — The Ghostyjoe™ Series

Learn How to Map, Analyze, and Exploit Active Directory Like a Pro

⚙️ Ghostyjoe™ Blackbelt Framework v2 — Full Recon, Scanning, Fuzzing & Cracking Automation

Build a Complete Ethical Hacking Pipeline with Nuclei, FFUF, Naabu, Gowitness & Hashcat

The Browser Extension Problem

Cybersecurity’s Blind Spot in the Age of AI

root_me-tryhackme-d4nc00p3r

Hello and welcome to our new challenge, today we have new room of tryhackme. In this room we have a website where we need to gain shell and…

📡 Hashcat Blackbelt — Cracking WPA2 WiFi Like a Pro (Part 3)

By Ghostyjoe™

Releasing Faction 2.0 at BlackHat Arsenal 2026🎉

I’m excited to announce that I’ll be returning to Black Hat Arsenal 2026 in Las Vegas and SecTor 2026 in Canada to demo OWASP Faction 2.0 —…

Introduction to Data Directory (PE)-Nir(9)

Hello, Cybersecurity enthusiasts and white hat hackers!!

Multiple Ways to Achieve Windows Persistence

This blog discusses several Windows persistence techniques that can be used after gaining initial access, before your C2 callback dies on…

Bare Metal and Neural Nets: Crafting a Purpose-Driven AI Cyberdeck

Your laptop is a rental. Your cloud is someone else’s computer. It’s time to build something that is actually yours.

Choosing the Right Acquisition Method in Android Forensics

Acquisition is where most Android forensic cases are actually won or lost — before any parsing tool opens a report. I learned that…

Black Hat 2026 — A First Timer’s Field Guide

No, I’m not going to Black Hat this year. This is not one of those posts where I manufacture conference FOMO from my couch.

Cryptography 101: What I Learned Trying to Understand How Our Data Actually Stays Safe

A few days ago I sat down to properly study cryptography, and honestly, I went in thinking it would just be “encryption = scrambling data…

How Active Directory Works and Why Attackers Love It

Understanding the backbone of Windows environments, and why compromising it often means compromising everything.

Phishing: The Enduring Cyber Threat and Its Rapid Evolution

How I found Critical Vulnerability In Government PSU that exposes Employee Very Sensitive Details…

Hello Hacker, Today I will tell you how I found a very critical vulnerability in the AI Chatbot that exposes all the govt. employees very…

Rocket : HTB

Rocket

Password Cracking — TryHackMe

Before jumping into hashes and tools — why should you spend time on this?

Hardware Signals & Pocket Recon: How to Be a Ghost in the Machine

Your VPN is not hiding you. Your smartwatch, your car fob, and that cheap LED strip from Amazon are broadcasting your life story in…

DEF CON (bio)hacker dreaming

White Hat vs Black Hat in bowels of the world’s most grotesque city

Status: Cracked.

All about Hashcat Masking

Hwat Hell Machine Hacking | Achieving Reverse Shell and Capturing the Flags

hwats hell machine

The Raspberry Pi Is Quietly Becoming an RF Research Workhorse

Combined with SDR hardware, GPIO interfaces, and embedded development tools, the platform enables portable labs capable of signal…

CTF pwn106 @ TryHackMe

Esse artigo é um write-up do desafio pwn106 da TryHackMe. Esse desafio faz parte da sala PWN101 de exploração de binários. O link da sala é…

Learn Linux for Hacking the Smart Way

Stop Memorizing Commands. Start Understanding the System That Runs the Internet.