General Research

LLM Application Security: The New Frontier in AI Security.Large Language Models (LLMs), such as ChatGPT, have transformed how humans engage with software by creating emails, generating code, and assisting in healthcare and banking. However, their unpredictable nature...

Cloud Penetration Testing: Process and LimitationsCloud penetration testing is a specialized security examination that identifies vulnerabilities, misconfigurations, and lax access controls in cloud systems such as AWS, Azure, and Google Cloud. It enables enterprises...

Beginner’s Guide to XSS Attacks (Part 2)This beginner-friendly guide introduces Cross-Site Scripting (XSS) with some simple examples anyone can understand and try in a safe environment. You’ll learn what XSS is, how it works, and how novice payloads can be used for...

Beginner’s Guide to XSS Attacks (Part 1)This beginner-friendly guide introduces Cross-Site Scripting (XSS) with some simple examples anyone can understand and try in a safe environment. You’ll learn what XSS is, how it works, and how novice payloads can be used for...

HTB: ForgeForge is a CTF Linux box with a "medium" difficulty rating on the HackTheBox platform. The box discusses subdomain enumeration, SSRF attacks, and rudimentary reverse engineering of a Python script for privilege escalation.The machine's dedicated IP address...

HTB: Baby Todo or Not Todo"Baby TODO or NOT TODO" challenge is a beginner-friendly web challenge on Hack The Box that revolves around a seemingly simple to-do list application. At first glance, the app allows users to add and remove tasks — but beneath the surface...