Welcome to Our Blog

Today we’re gonna see an effective technique to mantain access in Windows systems during red team operations just by modifying a registry key...

Today we’ll learn an advanced shellcode injection technique used by Lazarus group which uses UuidFromStringA API call. In this technique, the malware..

Instahack is a security tool officially designed to test the password strength of Instagram accounts using termux and kali with a brute force attack...

Today we’re gonna see a simple malware development technique, Shellcode injection via CreateRemoteThread in Golang...

Today we'll see how we can use Golang internal functions from syscall and golang.org/x/sys/windows packages to call Windows API. Other languages like C o C++ are specifically

The basename command in Linux is used to extract the last element of a file path. This is particularly helpful in bash scripts where you only need the...

Bugbounty Resources to get started with bug bounty hunting and security research. Learn about the tools and resources that can help you...

Cloud computing refers to the delivery of computing services over the internet (the cloud). These services include servers. servers, storage, databases, networking, software

Serverless computing is a cloud computing model that allows developers to build and run applications without having to manage the...

This post contains Active Directory Pentesting resources to prepare for new OSCP (2022) exam.

Bashed is a retired HackTheBox machine, rated easy and rightfully. We'll start by finding a hidden web shell to quickly gaining root level access due to misconfigured...

The basename command in Linux is used to extract the last element of a file path. This is particularly helpful in bash scripts where you only need the...