CGE: Visualization of a crawler and hidden connections between subdomains
I’d like to share my open-source tool for finding directories and subdomains, also known as a crawler, with you. I’m not claiming it will revolutionize the crawler space…
The Ultimate Pentesting Guide for Cybersecurity Professionals
Understanding Pentesting: Techniques, Tools, and Best Practices for Effective Security Testing
Not for the certificate: my experience with HTB CWES
I’ll make it clear right away: this is not a walkthrough. There won’t be a step-by-step breakdown of the exam, spoilers about machines, or any secret techniques. I don’t…
Daily Life of an Information Security Analyst: Reports, Vulnerabilities, and Real Security
Here is the PT Cyber Analytics team. In this article, we will talk about the work of analysts in cybersecurity projects, show what makes this profession attractive, and…
In Search of Secrets. iOS Pentest. Part Three
This time I will teach you how to find what developers hide in iOS applications. We might find passwords, personal data, or even backend API keys, which will allow us…
Evolution of Malware File Loading or How Hackers Transitioned from File Systems to RAM
Standard obfuscation no longer protects against security systems. Today, the battle for stealth is fought at the level of system calls and real-time library manipulations.…
Prompt Worms Part 2: I Practiced and Found 31 Vulnerabilities in the AI Agent Ecosystem
In the first part, we discussed the theory of Prompt Worms—self-replicating attacks via AI agents. OpenClaw was named the "perfect carrier." In this part, I put it into…
Pentest with AI agents, experiment with CAI
Hello tekkix!
CHP, banks and trees on a scale of 160 to 1: the history of creating a layout for the Standoff cyber battle
The Gramota.ru portal claims that "A layout is an object that accurately reproduces in a reduced size or full size any other object."
Pentesting terminals
On the vast expanses of the network, you can find many publications on the topic of conducting various pentests: stages, tools used, results obtained, reporting, etc.
Pentest for the little ones using WinRAR
Attacks using the long-patched WinRAR vulnerability remain relevant for many companies. Let's figure out how a typical attack works, how attackers bypass antivirus software,…
Mobile Device Security: Interview with a Positive Technologies Expert
Recently, the head of the advanced technologies department of Positive Technologies, Nikolai Anisenya, visited the AUTHORITY channel.
How to hunt security professionals
In the life of every HR, sooner or later, HE appears... Security professional! And how to approach hunting people for this position is usually unclear.
Nose to the wind: how our DNS sniffer helps find Blind vulnerabilities
Hello everyone! In the blog of the Solar 4RAYS Cyber Threat Research Center, we continue to share the results of incident investigations, useful tools for information…
Attacks on web caching. Cache poisoning: theory and practice
Caching is an efficient architectural solution that is used at all levels of computing systems today, from processor and hard disk cache to web server cache and reverse…
AWS Cloud Configuration Security Overview using Nuclei Templates
In the new version v9.8.5, Nuclei Templates have added templates for checking AWS Cloud configuration. In this post, we will discuss automating the verification of incorrect…