HHazel Chirinda1d ago · 12 min readOne Organization, Two Operating Systems: Securing Windows and macOS EndpointsAn organisation can have strong cybersecurity policies, advanced security tools, and a dedicated IT team, yet still have gaps in its endpoint protection. One reason is that organisations rarely operathazelsec.hashnode.dev
RrathsaraOct 17 · 9 min readIDSLab: What Does Another IDS Stage Actually Add?TL;DR: the tool is at hashtagrr.github.io/IDSLab. The rest of this is how it came to exist. I was reading research papers on machine learning and deep learning based intrusion detection systems when rr-cyber.hashnode.dev
VVishwaksen Reddy DhareddyOct 17 · 4 min readCoppersmith Attacks, Part 3: Factoring RSA When High Bits Are KnownIn Part 1, we explored the general Coppersmith framework. In Part 2, we saw how a small difference between two RSA plaintexts can lead to an attack. This time, we're attacking RSA from a different angvishwaksen.hashnode.dev
RrathsaraOct 15 · 18 min readThe Firewall Is the Target Now: A Practical Audit ChecklistIn 2020 I was a network security engineer at a firewall partner that had deployed a large number of firewalls across the region, from small businesses to large enterprises. When the company set out torr-cyber.hashnode.dev
HHritik ranjanOct 10 · 54 min read🔐 Building SteganoVault: A Production-Grade Steganography Tool with Docker, Flask, MySQL, and Nginx📚 Table of Contents Introduction What is Steganography? Why I Built SteganoVault Project Overview Main Features Technology Stack How Steganography Works in SteganoVault System Architecture Cblogs.hritikranjan.in
KKazem MortazaviOct 10 · 2 min read"Our plant network isn't connected to the internet" — why that sentence won't save your productionWhen I visit industrial sites, I almost always hear the same sentence: "Our control network is separate; it isn't connected to the internet." Then we draw the real map of who talks to whom, and the fosecurityland.hashnode.dev
SSYLVESTER BENJAMINOct 6 · 7 min readYou Can't Defend What You Can't See: Five Lessons From the 2026 Verizon DBIRFor eighteen straight years, Verizon's Data Breach Investigations Report told a consistent story: stolen credentials got attackers in the door more often than anything else. This year, that changed. Tbenjamin-sylvester.hashnode.dev
AarosionOct 5 · 9 min readBroScienceBroScience is a Medium Difficulty Linux machine that features a web application vulnerable to LFI. Through the ability to read arbitrary files on the target, the attacker gains an insight into how accarosion-labs.hashnode.dev
AarosionSep 23 · 11 min readBabyTwoBabyTwo is a medium-difficulty Windows machine set in an Active Directory environment. The initial foothold is gained through password guessing and the abuse of Windows logon scripts. Privilege escalaarosion-labs.hashnode.dev
RrathsaraSep 22 · 15 min readHiding Network Connections: Encryption, Onion Routing, and Identity SpoofingNetwork logs from an organisation's perimeter tell an analyst a great deal without capturing a single byte of payload: which hosts communicated, when, over which ports, for how long, and how much datarr-cyber.hashnode.dev
