Every now and then, a kernel bug comes along that is humbling precisely because it is so small. CVE-2026-23111 is one of those. It is a use-after-free in the Linux kernel’s nf_tables subsystem, and it lets an unprivileged local user climb all the way to root — and break out of a container while doing
CVE-2026-23111: How One Character Gave Away Linux Root Read More »
For a long time I’ve been bouncing between Python tutorials — following along, copying code, feeling like I understood it, then realizing days later that I couldn’t write any of it from scratch. The cure was obvious: stop reading and start building. So I built a small password manager. Nothing fancy: a CLI tool that
Building a Simple Encrypted Password Manager in Python Read More »
If you work in cybersecurity — or you’re studying to get into the field — you need to pay attention to what just happened. Claude Mythos is here, and it’s about to change everything we know about vulnerability research. On April 7, 2026, Anthropic announced Claude Mythos Preview, a new AI model that sits above
Claude Mythos: The AI Model That’s Rewriting the Rules of Cybersecurity Read More »
Metasploit is a powerful and widely-used framework in the field of penetration testing and cybersecurity. It is used to discover vulnerabilities, develop exploits, and manage exploitation sessions—all within a safe and legal testing environment. This Metasploit tutorial will guide you through the basics of using Metasploit, one of the most powerful frameworks for penetration testing
Metasploit Tutorial – Learn How to Use Metasploit Read More »
Penetration Testing (Pen Test), also known as Ethical Hacking, is the process of simulating a real-world cyberattack against computer systems, networks, or web applications.The main goal is to identify security vulnerabilities before malicious hackers exploit them, and then fix those weaknesses to improve overall security. 📌 This article is also available in Arabic: here Why
What is Penetration Testing (Pen Test)? Read More »
In this article, we’ll walk through SMB enumeration using Nmap, a core skill in the enumeration phase of penetration testing. You’ll learn how NetBIOS and SMB services work, how to scan and analyze them, and how to set up a hands-on lab to practice. Understanding NetBIOS and SMB NetBIOS (Network Basic Input/Output System) NetBIOS (Network
SMB Enumeration Using Nmap – NetBIOS Scanning & Lab Setup Read More »
Wireshark is a powerful network protocol analyzer used to monitor network traffic, troubleshoot issues, analyze communications, and secure networks. It captures and displays data from network packets in real-time, allowing you to see every detail of transactions across your network. This makes Wireshark an essential tool for IT professionals, cybersecurity analysts, and network administrators, helping
Wireshark Tutorial: How to Install and Use Wireshark Read More »
In this article, we will explore ARP Poisoning, one of the common Man-in-the-middle(MITM) attack techniques used in network security breaches. The goal of this article is to provide a hands-on guide for setting up a lab environment to perform an ARP poisoning attack and then detect it using Wireshark. By the end of this article,
Understanding ARP Poisoning and detection using wireshark Read More »