New’s
Cyber Security
Artificial Intelligence and Machine Learning
What Is the Concept of a State-Value Function in Reinforcement Learning?
When I first started learning reinforcement learning (RL), one idea kept showing up…
How Is Q-Learning Used in Reinforcement Learning?
If you’ve spent any time reading about reinforcement learning, you’ve probably run into…
What Is the Concept of Exploration vs. Exploitation in Reinforcement Learning?
Imagine you just moved to a new city and you’re looking for the best coffee shop nearby. Do…
How Do You Handle Imbalanced Datasets in Deep Learning?
Every time I’ve worked on a fraud detection, medical diagnosis, or rare-event prediction…
What Is the Difference Between a Pre-Trained Model and a Fine-Tuned Model in NLP?
Almost every modern NLP application you interact with today — chatbots, search engines,…
What Is a Word Embedding in NLP and Why Is It Important?
One of the first hurdles anyone runs into when working with natural language processing is a…
Featured
Ultimate Cheat-sheets
Ultimate Dynamic Host Configuration Protocol (DHCP) Cheat Sheet
Dynamic Host Configuration Protocol (DHCP) is a client/server protocol that automatically provides an Internet…
Ultimate DNS Cheat Sheet
Introduction The Domain Name System (DNS) is a hierarchical and decentralized naming system for computers,…
Extended Penetration Testing Cheatsheet
This Penetration Testing Cheatsheet, covering key areas and commands across various tools and techniques. It’s…
Connect
Stay in the Loop
Linux
Understand How Linux Works
My Personal Thoughts
Research
the latest
Recent Articles
Understanding and Defending Against Cross-Site Scripting (XSS) Vulnerabilities
Cross-Site Scripting (XSS) is consistently reported as one of the most common security flaws in web applications. Its prevalence is…
Mastering Web Hacking Reconnaissance: The Foundation of Bug Bounty Hunting
The first step to attacking any target is conducting reconnaissance, or simply put, gathering information about the target.…
Environmental Setup and Traffic Interception
To hunt for bugs efficiently, you’ll need a well-configured environment. This chapter guides you through setting up your hacking…
How the Internet Works: A Hacker’s Primer
Before jumping into hunting for bugs, it’s essential to understand how the internet works. Finding web vulnerabilities is all about…
Sustaining Your Success: Mastering the Bug Bounty Journey
Even if you understand the technical information, you may still have difficulty navigating the nuances of bug bounty programs. Or…
Not All Bug Bounty Programs Are the Same: Finding Your Target
Finding the right bug bounty program to target is the crucial first step to becoming a successful bug bounty hunter. With the rapid…
(Out of Scope) Vulnerabilities: Knowing What Not to Report in Bug Bounty Programs
However, in the world of security research and bug bounties, there are several common findings and false positives that are…
Access Control and Security Through Obscurity
Security through obscurity is a strategy in web application development that makes the dangerous assumption that a vulnerability…
Detecting XML External Entities (XXE) Vulnerabilities
XML External Entity (XXE) is an attack that exploits a flaw in an application’s XML parser configuration to perform a number of…
Cross-Site Request Forgery (CSRF) and Insecure Session Authentication
Cross-Site Request Forgery (CSRF) is a vulnerability where an attacker takes advantage of a logged-in user’s authenticated state to…
Detecting and Preventing Injection Attacks: A Deep Dive into SQL, NoSQL, and Scanners
Code injection represents a critical class of security vulnerability where unvalidated data is added (injected) into a vulnerable…
A Quick Overview of Cross-Site Scripting (XSS)
Cross-Site Scripting (XSS) stands as a prevalent and dangerous vulnerability in web applications. It occurs when a malicious actor…
Relative Path Overwrite (RPO): Exploiting Path Confusion for Defacement
Introduction Relative Path Overwrite (RPO) is an older, lesser-known vulnerability that still impacts a significant number of…
CSP Bypass: Turning a Security Header Against Itself
The Content Security Policy (CSP) is a special HTTP response header designed to mitigate certain classes of client-side attacks,…