Loading content...
Loading content...
CVE breakdowns, lab walkthroughs, and security research from CIC members.
iot-securityA practical walkthrough of IoT firmware reverse engineering. Learn to extract filesystems using Binwalk and emulate target binaries using QEMU.
honeypotsBuild an active defense mechanism. Learn how high-interaction honeypots and honeytokens can detect intruders, trace exploitation paths, and gather threat intelligence.
windowsDelve into Windows kernel space. Learn how to configure host-to-guest debugging using WinDbg/KDNET and identify low-level hooks and stealthy rootkits.
api-securityMicroservices and APIs are key targets for attacks. Learn how Broken Object Level Authorization (BOLA) and Mass Assignment vulnerabilities occur, and how to defend against them.
cryptographyA mathematical and conceptual guide to Zero-Knowledge Proofs (ZKPs). Compare ZK-SNARKs and ZK-STARKs and understand their impact on decentralized privacy and secure identity.
active-directoryAbusing Active Directory Certificate Services (AD CS) and key credential links. Learn how modern red teams utilize Shadow Credentials and Golden Certificates for persistent domain access.
kubernetesA technical analysis of Kubernetes API server exploitation vectors, covering RBAC misconfigurations, service account tokens, and container escape techniques to achieve cluster root.
web-securityExplore the limits of Web Application Firewalls. Learn how signature and heuristic detection can be bypassed using double-encoding, Unicode normalization, and JSON/XML parsing discrepancies.