all posts

August 18, 2026
Kerberoasting: cracking service accounts without touching them
June 30, 2026
JWT: when the public key becomes the secret
May 20, 2026
Spectre: reading memory the CPU never really read
April 2, 2026
Tcache poisoning: turning a use-after-free into an arbitrary write
March 11, 2026
ROP: building code when you cannot inject it
February 20, 2026
SQL injection: from UNION to blind time-based
February 14, 2026
XSS: stored, reflected and DOM-based
February 8, 2026
CSRF: making the victim's browser act
February 2, 2026
SSRF: turning the server into a proxy
January 27, 2026
XXE: XML external entities
January 21, 2026
Path traversal and Local File Inclusion
January 15, 2026
Insecure deserialization: objects that run code
January 9, 2026
Command injection: from input to shell
January 3, 2026
SSTI: server-side template injection
December 28, 2025
IDOR/BOLA: when the ID is the only defence
December 22, 2025
Password hashing: bcrypt, scrypt, Argon2
December 16, 2025
OAuth 2.0: the recurring pitfalls
December 10, 2025
SAML attacks: the signature nobody checks properly
December 4, 2025
Session fixation: fixing the ID before login
November 28, 2025
Padding oracle: decrypting without the key
November 22, 2025
Length extension: why H(secret||msg) is not a MAC
November 16, 2025
ECB: the mode that draws the penguin
November 10, 2025
Weak RNG: predictable tokens
November 4, 2025
MFA bypass: where the second factor breaks
October 29, 2025
Password reset poisoning: hijacking the link via Host header
October 23, 2025
TLS: downgrade and weak ciphers
October 17, 2025
Stack buffer overflow: the basics everything rests on
October 11, 2025
Format string: when %n writes to memory
October 5, 2025
Integer overflow: when numbers wrap
September 29, 2025
Use-after-free: using freed memory
September 23, 2025
GOT overwrite: hijacking library calls
September 17, 2025
ret2libc: reusing the library against NX
September 11, 2025
SROP: forging a sigreturn
September 5, 2025
Stack canary: how it is bypassed
August 30, 2025
ASLR: the techniques to defeat it
August 24, 2025
one_gadget and the glibc heap "houses"
August 18, 2025
Writing shellcode: small, null-free, self-contained
August 12, 2025
ARP spoofing: MITM on the local network
August 6, 2025
DNS spoofing and cache poisoning
July 31, 2025
Amplification DDoS: small packets, big damage
July 25, 2025
Scanning with nmap: SYN, versions, evasion
July 19, 2025
WPA2: handshake capture and KRACK
July 13, 2025
Evil twin: the malicious twin access point
July 7, 2025
LLMNR/NBT-NS poisoning with Responder
July 1, 2025
VLAN hopping: jumping the segmentation
June 25, 2025
BGP hijacking: hijacking whole prefixes
June 19, 2025
DHCP attacks: starvation and rogue servers
June 13, 2025
Pass-the-hash: authenticating without the password
June 7, 2025
Pass-the-ticket and overpass-the-hash
June 1, 2025
Golden and Silver Ticket: forging Kerberos
May 26, 2025
AS-REP roasting: accounts without pre-authentication
May 20, 2025
NTLM relay: forwarding the authentication elsewhere
May 14, 2025
DCSync: asking the domain controller for the hashes
May 8, 2025
Unconstrained delegation: TGTs handed over
May 2, 2025
LSASS dumping: credentials in memory
April 26, 2025
UAC bypass: from admin to elevated
April 20, 2025
BloodHound: attack paths in the domain
April 14, 2025
The PE format: anatomy of a Windows executable
April 8, 2025
Process injection: running code in another process
April 2, 2025
DLL hijacking: the library loaded from the wrong place
March 27, 2025
Process hollowing: hollow a process and refill it
March 21, 2025
Packing and unpacking: code that reveals itself at runtime
March 15, 2025
Anti-debugging: when malware knows it is watched
March 9, 2025
API hooking: intercepting system calls
March 3, 2025
Rootkits: hiding beneath the system's eye
February 25, 2025
Ransomware: the mechanics of encryption
February 19, 2025
C2 and beaconing: the command channel
February 13, 2025
AWS IAM: the privilege escalation paths
February 7, 2025
Misconfigured S3 buckets: data exposed to the world
February 1, 2025
Container escape: breaking out to the host
January 26, 2025
Kubernetes: abusing RBAC and service accounts
January 20, 2025
Exposed Docker socket: host root in one line
January 14, 2025
Serverless security: the surface that remains
January 8, 2025
IaC and secrets: Terraform state in the clear
January 2, 2025
Kubernetes secrets: base64 is not encryption
December 27, 2024
Managed identity: abusing the instance credentials
December 21, 2024
IMDSv1 vs IMDSv2: why the metadata endpoint changed
December 15, 2024
HTTP request smuggling: disagreement on where a request ends
December 9, 2024
Web cache poisoning: poisoning what everyone is served
December 3, 2024
Subdomain takeover: the CNAME pointing to nothing
November 27, 2024
GraphQL abuse: introspection, batching, depth
November 21, 2024
File upload: from profile picture to webshell
November 15, 2024
Prototype pollution: poisoning Object.prototype
November 9, 2024
CORS misconfiguration: trusting the wrong Origin
November 3, 2024
Clickjacking: the click that was not for you
October 28, 2024
Open redirect: your domain sending users elsewhere
October 22, 2024
Race conditions and TOCTOU: the window between check and use
October 16, 2024
Sudo misconfiguration: from user to root
October 10, 2024
SUID binaries: running with the owner's privileges
October 4, 2024
Writable cron jobs: scheduled privilege escalation
September 28, 2024
Linux capabilities: root split into (exploitable) pieces
September 22, 2024
Linux kernel exploitation: from user to ring 0
September 16, 2024
SSH agent hijacking and mishandled keys
September 10, 2024
Reverse shells: making the target call home
September 4, 2024
Pivoting and tunneling: moving through internal networks
August 29, 2024
Living off the land: attacking with the tools already there
August 23, 2024
Log4Shell: when a log line becomes code execution
August 17, 2024
Password spraying and credential stuffing
August 11, 2024
Phishing: harvesting credentials at scale
August 5, 2024
OSINT: reconnaissance before the attack
July 30, 2024
Hash cracking: dictionaries, rules, masks
July 24, 2024
BLE attacks: sniffing, spoofing and replay
July 18, 2024
RFID/NFC cloning: badges copied in seconds
July 12, 2024
Firmware extraction: UART, JTAG and the flash
July 6, 2024
Dependency confusion: impersonating the internal package