Practical content from industry professionals on digital forensics · data recovery · cyber security · KVKK compliance.
A WAF is a security layer that filters HTTP requests in front of a web application. Its types, why it can be bypassed and the fact that a WAF does not close the flaw.
Read moreARP spoofing puts an attacker in a man-in-the-middle (MITM) position with forged ARP replies on a local network. How it works, what it enables and defense with dynamic ARP inspection.
Read moreWireshark captures and inspects network traffic at the packet level. Core concepts, what to look for in security analysis and the encrypted traffic limit.
Read moreA web shell is a backdoor placed on a server that runs commands remotely. How it gets placed, its signs, detection and durable post hack cleanup.
Read moreAV/EDR evasion is the effort to hide malware from antivirus and EDR. Signature changing, in memory execution, LOLBins and the defense/detection that strengthens EDR.
Read moreKerberos ticket attacks target Active Directory. Golden/Silver Ticket, Pass-the-Hash/Ticket, AS-REP Roasting and defense paths.
Read morePivoting uses a compromised system as a bridge into the internal network. SSH tunnel, port forwarding, SOCKS proxy, and network segmentation as defense.
Read moreDirectory discovery finds hidden unlinked directories and files on a site (/admin, /.git, backup.zip). Gobuster/ffuf, commonly found critical paths and defense.
Read moreSubdomain discovery surfaces all of an organization's subdomains because each is a new attack surface. Passive/active methods and the subdomain takeover risk.
Read moreAiTM phishing steals both password and session cookie with a proxy, bypassing MFA. Its difference from classic phishing, phishing resistant MFA and defense.
Read moreA shadow API is an undocumented API endpoint an organization is unaware of. How it appears, its types, API discovery and inventory, and the OWASP API link.
Read moreWebhooks carry risk both when receiving (fake requests) and sending (SSRF). Signature verification (HMAC), replay prevention and URL validation.
Read more