Cybersecurity

Posts tagged "Cybersecurity"

24 posts found

Security Architecture of Authorisation and Authentication UIs on the Linux Desktop

A deep architectural analysis of password prompts and permission dialogs on modern Linux: how Wayland, polkit, PAM, and xdg-desktop-portal isolate credentials and capabilities as of 2026.

Oct 06, 2026

20 min read

3,830 words

İS

ibrahimsql

Cybersecurity Engineer

Cybersecurity Prototype Pollution Web Security

Featured

Prototype Pollution: Engine Internals, Node.js Gadget Chains, and Hardening Architecture

A deep technical dissection of JavaScript prototype pollution: V8 object shapes, server-side gadget chains in Node.js child_process and template engines, client-side DOM vectors, and strong runtime mitigations.

Oct 06, 2026

13 min read

2,587 words

İS

ibrahimsql

Cybersecurity Engineer

Reverse Engineering Linux ELF

Featured

Modern Linux Binary Exploitation: Memory Layout, Compiler Mitigations, and Gadget Mechanics

An in-depth technical manual on x86_64 ELF memory corruption mechanics, compiler mitigations (Canaries, Full RELRO, PIE, Intel CET), sanitizer triage, and defensive binary engineering.

Oct 06, 2026

16 min read

3,101 words

İS

ibrahimsql

Cybersecurity Engineer

Cybersecurity Defense Observability

Turning Denied Requests into Alerts: From Log to Triage

Deny logs become attack signal: alert record format, scanning patterns, threshold tuning, and a response card confirmed with a single request.

Oct 05, 2026

24 min read

4,636 words

İS

ibrahimsql

Cybersecurity Engineer

Cybersecurity Defense Authorization

Scoring Security Findings: An Impact-by-Reachability Table

CVSS alone lacks context: a practical prioritization table crossing data class and tenant breach with ease of access.

Oct 05, 2026

22 min read

4,337 words

İS

ibrahimsql

Cybersecurity Engineer

Cybersecurity Defense Authorization

Security Logging: Who Accessed What, Decided How

Authorization decisions must be observable: an event schema recording actor, tenant, object, action, and policy decision, plus how to test it.

Oct 05, 2026

23 min read

4,589 words

İS

ibrahimsql

Cybersecurity Engineer

API Security Cybersecurity Defense

Shadow APIs and Asset Inventory: Mapping the Attack Surface

You cannot protect an endpoint you do not know: an inventory record format and coverage metric built from code, traffic, and DNS sources.

Oct 05, 2026

21 min read

4,081 words

İS

ibrahimsql

Cybersecurity Engineer

Cybersecurity Reverse Engineering Tools

Featured

Metasploit Framework: Modules, Sessions, and Basic Workflows

Metasploit organized by task: choosing modules, handling sessions, and keeping notes during a test.

Nov 30, 2025

9 min read

1,788 words

İS

ibrahimsql

Cybersecurity Engineer

Reverse Engineering Cybersecurity Tools

Wireshark: Capture Filters and Malicious Traffic Patterns

How to capture and analyze network traffic with Wireshark. Essential filters and techniques for spotting malicious activity.

Nov 29, 2025

11 min read

2,013 words

İS

ibrahimsql

Cybersecurity Engineer

Cybersecurity Web Security Tutorials

OWASP Top 10: What Each Risk Category Covers

The ten OWASP risk categories summarized: from Broken Access Control to Injection, with prevention pointers.

Nov 28, 2025

11 min read

2,113 words

İS

ibrahimsql

Cybersecurity Engineer

Mobile Security Linux Cybersecurity

Mobile App Testing Notes: APK Analysis, Jailbreak Detection, and Traffic Interception

Manual mobile test tasks: decompiling APKs, dealing with jailbreak and root detection, and intercepting TLS traffic.

Nov 20, 2025

11 min read

2,101 words

İS

ibrahimsql

Cybersecurity Engineer

Cybersecurity Web Security Bug Bounty

WordPress Attack Surface: Plugins, Themes, and Core Misconfigurations

Where WordPress findings usually come from: plugin and theme flaws plus core misconfigurations, and how testers narrow that surface.

Nov 20, 2025

10 min read

1,986 words

İS

ibrahimsql

Cybersecurity Engineer

Cybersecurity Cloud Security Pentesting

A map of web vulnerability classes, split by client-side and server-side, for planning what to study next.

Feb 15, 2025

11 min read

2,024 words

İS

ibrahimsql

Cybersecurity Engineer

Web Security Cybersecurity

Attacking Secondary Contexts in Web Applications

Secondary contexts testers check after the main flow: log files, admin panels, and background jobs.

Feb 10, 2025

12 min read

2,271 words

İS

ibrahimsql

Cybersecurity Engineer

Cybersecurity Web Security

Bypassing WAFs with Unicode Compatibility

When a WAF inspects input before Unicode normalization but the backend processes it after, compatibility characters can slip through.

Feb 05, 2025

10 min read

1,951 words

İS

ibrahimsql

Cybersecurity Engineer

Cybersecurity AI Automation

Featured

LLM-Assisted Security Testing: Payloads, Code Review, and Detection Notes

Where LLMs fit in a manual test: payload drafting, code review assistance, and detection support, with limits.

Jan 31, 2025

12 min read

2,203 words

İS

ibrahimsql

Cybersecurity Engineer

Cybersecurity AI Penetration Testing

Smart Contract Auditing: Reentrancy and Common Solidity Flaws

Solidity audit starting points: reentrancy and other frequent flaws, plus Slither and Mythril usage notes.

Jan 20, 2025

11 min read

2,130 words

İS

ibrahimsql

Cybersecurity Engineer

Reverse Engineering Cybersecurity

OWASP ZAP 2.16: New Features and Scan Comparison Notes

Notes on OWASP ZAP 2.16: new features, performance observations, and differences from paid scanners.

Jan 11, 2025

10 min read

1,871 words

İS

ibrahimsql

Cybersecurity Engineer

XSS Cybersecurity Reverse Engineering

Zero-Interaction XSS: Payloads in Metadata, Filenames, and API Responses

XSS vectors that trigger without a click: metadata, filenames, and API responses rendering unsanitized content.

Jul 29, 2024

11 min read

2,189 words

İS

ibrahimsql

Cybersecurity Engineer

Posts tagged "Cybersecurity"

Other Tags