Evil Twin Attacks
A blog on how Evil Twin attacks work and how to defend against them.
ANORAK WRITES
Lateral Movement with Pass-the-Hash
A blog on how Lateral Movement works with Pass-the-Hash (PtH) attacks in Windows environments, and how to defend against them.
Lakera Gandalf: Agent Breaker
Firsthand insights from my experience as a Gandalf - Agent Breaker beta tester, uncovering real prompt injection exploits and AI security lessons.
The Art of Subdomain Enumeration
A comprehensive guide on how to discover and exploit subdomains
Evading Firewalls and IDS with Nmap
A technical guide on how to use Nmap's evasion techniques to bypass modern firewalls
Shodan 101
Using the search engine to find vulnerable IoT devices and exposed servers
Understanding Fileless Malware
A deep dive into how fileless malware operates and how to defend against it
Stealing Cloud Secrets with SSRF
Understanding Server-Side Request Forgery (SSRF) and how to defend against them
IDOR: The Coat Check Problem in Web Apps
Understanding Insecure Direct Object References (IDOR) and how to defend against them
Remote Code Execution: When Websites Talk to the System
Understanding Command Injection Vulnerabilities and how to defend against them