Hi, there! While watching videos on Youtube, I saw a Google advertisement which one of wrote a well-paid job. That seemed interesting and weird. The advertisement was about an android application on Google Play. Let’s take a look at this
Malware Development – AV Evasion P2 Hi everyone in this post we will talk about bypassing AV Engines which we talked about on YouTube videos. Firstly, let’s remember the static and dynamic engines. What do these mean? Static Engine: The
Hi there! In this blog, we will discuss how to compromise an employee system with some tricks. We will cover a client-side attack and some chaining of techniques like phishing, HTML Smuggling, Droppers, etc. I couldn’t develop the demo lab
In this article, the concepts of “Active Defense” and “Counter Attack/Hacking”, which are often confused, will be discussed. We can distinguish the subject of defense as active and passive. All systems/structures such as firewalls and IPS/IDS used in institutions are
If you’re reading this article, you shouldn’t begin the learning offensive security 🙂 Only joke. I don’t want to make it hopeless. But if I must be realistic, your way will be hard. We should talk about some soft skills
Hi everyone, in this post I want to talk about some social engineering techniques. There are several ways for social engineering, we will cover these techniques. Additionally, we will talk about colors and psychology. These posts must use only educational
Hi all, in this post i want to talk about what can we do when testing large networks in penetration testing. Let’s start with talking. In my opinion, 1 pentester can test 150-200 IPs in one project. More IP addresses
Bu yazımda biraz SSRF yani Server Side Request Forgery denen zafiyeti açıklamaya çalışacağım bakalım olacak mı :)). ( ingilizcem o kadar kötü değil vurmayın.) Zafiyet hakkında biraz konuşalım. XSS ‘i duymuşsunuzdur hani Client Side kod çalıştırabildiğimiz bir zafiyet vardı. Bu
ASLR NEDİR ? Exploit geliştirme ile uğraşanlar veya uğraşmaya başlamaya çalışanlar duymuştur bunları. Exploiti yazdık o kadar uğraştık didindik başta bi çalışır gibi oldu ammaaaa sonra baktık ki memory de bişeyler değişiyor yav, ters giden bişeyler var ne ki acaba
Merhabalar, Atış Alanı’nın ilk atışlarına hoş geldiniz 🙂 Sabah dalmışken aklıma gelen bir kaç zafiyetleri birleştirme senaryosundan bahsetmek istiyorum. Bir haber sayfası düşünün arka planda MySql kullanıyor ve sql injection açığı var ayrıca yorumları kaydediyor. Ve javascript kodları çatır çatır