Articles by tag: pentest

Password Recovery for ZIP via John the Ripper

Local Audit of ZIP Archives Using zip2john and John the Ripper. Step-by-Step Pipeline, Brute-Force Optimization, and Working with Hashes Without Data Leaks.

Start in Cybersecurity: Vacancies and Practice

Learn how to enter cybersecurity: vacancies analysis, homelab, pet projects, CTF. Practical guide for junior developers and engineers. Start your career consciously.

TelegramRAT: RAT via Telegram bot for red team

TelegramRAT Breakdown — cross-platform RAT with C2 via Telegram. Installation, commands, features for developers. Study for pentest and red team simulations. Detailed guide.

Web Application Vulnerabilities: XSS SQLi enumeration

Breakdown of top-3 vulnerabilities in web: user enumeration, XSS, SQL injections. Fix methods for developers: prepared statements, encoding. In-depth pentest guide.

Bypassing 2FA in the bank: brute-force attack

Pentest breakdown: how a bank's 4-digit SMS code is cracked in 35 sec without limits. API analysis, JS exploit, CWE-307, recommendations. For developers and pentesters.