Alright, before delving into this write-up it is important to mention a few requirements for this setup. Basic Python knowledge it is expected, and that it is already installed on your system. In addition, you must have Obsidian installed. An API Key is also required, as this is something you will need for all the…
This module is blocked from loading into the Local Security Authority If you are on Windows 11, you might have seen this pop-up window, wondering what you did wrong or what just happened. The file itself is located in the C:\Program Files\Bonjour folder. Bonjour is a networking protocol developed by Apple Inc. that enables devices…
Everyone loves cookies, right? Well, I am talking about different types of cookies, and I hope you gain some knowledge from my post. Let’s dive into it. Cookies play a critical role in web application pentesting due to their ability to manage user sessions, preferences, and security attributes. They are often a primary target for…
Web Application Security is an important topic in 2025 because every modern business relies on web applications to manage operations, deliver services online, or engage customers. Understanding Common Web Apps VulnerabilitiesWeb Application Security is critical for protecting data and maintaining trust. An attacker needs to find only one vulnerability in a login form, API, or…
Do you know where Windows stores your passwords and login details that you save when using this operating system? For example, when you access a network share, you type a username and password to gain access. When you do that, Windows stores those details in a hidden desktop app named Credential Manager. What is the…
A comprehensive Web Application Testing Guide This blog post provides a thorough guide to web application penetration testing. Whether you are a security researcher, bug bounty hunter, or a pentester, it all starts with a plan or structure for how to begin. This Guide is discussed in seven phases, respectively: Pre-engagement Phase Reconnaisance & Information…
MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) is a comprehensive framework that provides a structured and organized approach to analyzing and understanding the tactics and techniques of threat actors during a cyberattack. The MITRE ATT&CK framework offers a detailed description of the various stages of a cyberattack, from initial reconnaissance and exploitation…
Digital signatures are crucial in cryptography to ensure secure communication and data integrity. But how exactly do they work? A digital signature, implemented using SHA-256 with RSA encryption, is a secure method for verifying the authenticity and integrity of data. Here’s a detailed breakdown of how it works: Step1. Process Overview: Hashing with SHA-256: The…
Hey there! Suppose you have downloaded a .jpeg image from the World Wide Web and suspect something is hidden inside it. Or typically in a Capture The Flag (CTF) competition. How do you get it out? In this article, you will discover how to conceal secret messages or data by embedding data into a file. Then,…
Encoding and encryption are used interchangeably. Encryption involves encoding data for confidentiality and security, while encoded data is not necessarily confidential. What is encoding? Encoding is converting data from one format to another so that a different system can safely use it. This might involve sending binary (1s and 0s) data via email or displaying…