Project: OWASP Top 10
Historical development, architectural differences, and industry alignment of OWASP Top 10 projects covering Web, Mobile, API, K8s, CI/CD, and LLM/Agentic systems.
Blog
Agentic AI Protocols: A New Attack Surface?
With the rise of autonomous AI agents, protocols like MCP, A2A, ANP, UCP, and AP2 form the backbone of the new Agentic Web. In this post, we explore what Agentic AI truly is, map the entire protocol ecosystem layer by layer, and analyze the security vulnerabilities each layer introduces.
Golang for Hackers
The Go (Golang) programming language for cybersecurity researchers, building fast network scanners, exploit development, and offensive tool design.
Nextcloud and OnlyOffice: The Sovereign Solution Against M365 and Google Workspace
An architectural analysis of integrating Nextcloud Hub, OnlyOffice, and Mailcow to achieve enterprise data sovereignty; compared with M365 and Google Workspace along with performance optimization guidelines.
Escaping the Office Ecosystem: Modern Engineering Tools
Reclaiming data sovereignty in the modern computing paradigm: An engineering-focused future with LaTeX, DuckDB, and Slidev.
The Anatomy of Modern Web Architecture
A comprehensive architectural guide exploring the evolution of the web ecosystem, from modern rendering strategies (CSR, SSR, SSG, ISR) and popular tech stacks (MERN, PERN, .NET) to a deep-dive into DevSecOps and supply chain security.
SentinelOne Singularity Platform: AI-Powered XDR
A master guide distilled from over 180 pages of technical analysis reports on the SentinelOne Singularity Platform; covering autonomous architecture, Storyline, Rollback, XDR, and Purple AI.
Information Gathering Techniques & Cyber Intelligence
A comprehensive cyber threat intelligence guide bridging classic OSINT and scanning techniques with modern cloud exposure, supply chain security, AI-powered CTI pipelines, the ProjectDiscovery ecosystem, and OPSEC.
Global Cyber Threat Actors: APT (Advanced Persistent Threats)
This introductory section will establish the basic concepts necessary to understand the detailed actor profiles that follow. It will define what an APT means in the modern context and address the conf
Intrusion Detection on Apache Web Server
A comprehensive guide on detecting web application attacks (SQLi, XSS, LFI, RFI, Path Traversal) by analyzing Apache access logs manually and automatically using ModSecurity and Fail2Ban.
Popular Endpoint Security Solutions
In this article, we will take a look at endpoint security solutions that are popularly used around the world. We will discuss these solutions with their features, pros and cons.
Operating System Distributions and Lab Environments for Cyber Security
Hello, in this article, I will talk about the distributions and lab environments used in the field of cyber security.
Windows Complete Post-Exploitation Guide
A comprehensive security guide examining how an attacker maintains persistence after Initial Access and spreads laterally through the network. Covers WMI Event Subscriptions, COM Hijacking, IFEO, Kerberos attacks, SOC detection engineering, and hardening steps.
Elastic Stack Guide
A comprehensive guide to installing, configuring, and managing Elasticsearch, Logstash, Kibana, and Beats (Elastic Stack) on Debian/Ubuntu, including Elastic Agent/Fleet architecture, ES|QL query language, Vector Database integration, and MITRE ATT&CK SIEM rules.
Operating System Concepts
An in-depth guide to operating system structures, processes, CPU scheduling algorithms, memory management (segmentation, paging, virtual memory), and security fundamentals, inspired by the classic 'Dinosaur Book' (Operating System Concepts).
Cyber Attacks in the OSI Model
Hello, in this article, I tried to explain Cyber Attacks on the OSI model. You can find many types of cyber attacks in this article.
Malware Analysis Basics
A complete guide to malware analysis fundamentals, covering malware types, building a secure sandbox environment, static and dynamic analysis techniques, memory forensics, and reverse engineering tools.
Offensive Security with Kali Linux
Hello, in this article I will talk about the Kali Linux distribution. I will explain what it does, what capabilities it has, and outline common pentesting tools.
System Programming Fundamentals
A comprehensive guide to system programming with C and x86 Assembly. Explore processor architecture, low-level memory management, and hardware integration through theory and practical laboratory exercises.
Python for Hackers
A comprehensive guide on Python programming for security professionals, covering HTTP requests scripting, web automation with Selenium, socket programming for port scanning, and SSH remote management using Paramiko.
The Birth of Computers and the First Operating Systems
A comprehensive historical journey from ENIAC to Xerox PARC, Unix to modern cloud ecosystems and kernel architectures.