Google Dorking: Manual and Automated Methods for finding Hidden Information
In this article, we will showcase how to effectively use Google Dorking to uncover hidden and sensitive information on websites. Google Dorking enables security researchers to proactively discover and address potentially sensitive information that might not be intended for public access.
The Difference between White-Box and Black-Box Pentesting
How Misconfigurations in Linux can leave you vulnerable to Attackers
Security misconfigurations in Linux systems occur when necessary security controls are not properly implemented for servers or web applications. In this article, we’ll emphasize the importance of detecting and addressing misconfigurations through practical examples and tools like Nmap and the Metasploit Framework.
How do QR Codes work and how criminal hackers use them to generate phishing attacks – Demo
In this article, we’ll explore the pervasive presence and potential risks associated with QR codes in daily life. We’ll discuss the ease with which malicious QR codes can be created, either manually or through specialized tools, allowing attackers to embed harmful payloads. A tutorial its included, emphasizing its role in creating various types of malicious QR codes for security testing purposes.
Kevin Poulsen, aka Dark Dante, and his hacking activities on ARPANET’s networks
The Difference between Vulnerability Assessment and Pentesting
Red Team Tactics to uncover hidden Secrets on Websites
In this article, we’ll demonstrate red team tactics for uncovering hidden secrets on websites. Despite security layers that companies deploy, such as Cloudflare WAF and next-generation firewalls, attackers can exploit sensitive information embedded in code, such as API keys and tokens.