Ather sultan — Front-End Developer | React.js | JavaScript | HTML5 | CSS3 | Tailwind CSS | Open to Remote Opportunities
🚀 Open to Remote Work | Front-End Developer | Job & Internship Opportunities Hello cyberr Network! 👋 I’m actively looking for remote opportunities as a Front-End Developer, where I can contribute my skills, learn from experienced developers, and build modern, responsive, and u…
https://youtu.be/kIG2ffjUrXU في الفيديو ده من مجتمع Information Security Tutorials هنناقش أبرز الثغرات الأمنية اللي اتكشفت في Node.js خلال أكتوبر 2026، وهنفهم ليه تحديثات الأمان الخاصة بالـ Runtime والـ Dependencies ممكن تكون حاسمة في حماية تطبيقات الويب والأنظمة اللي بتعتمد علي…
Hirun Nadeeja — Aspiring Information Security Analyst
Built a free client-side security utility for developers and security learners: Sanitize It combines an input defense playground (12 contexts including XSS, SQLi, NoSQL, and CRLF) with a static heuristic scanner covering 35+ vulnerability patterns across Node.js, Python, PHP, an…
Understanding TOR Operations: An Anonymity & Dark Web Intelligence Framework. TOR remains one of the most misunderstood tools in modern cybersecurity. While many view it solely as a privacy browser, it functions more accurately as an anonymity infrastructure layer that enables b…
OSINT Environment Hardening: Your OSINT Environment Is Your First Line of Defense; But It Needs an Update Most OSINT practitioners still make the same fundamental mistake: they treat their operating environment as an afterthought. They run reconnaissance from their daily driver.…
Il y a encore beaucoup de réglages et de chose à revoir, mais voilà ce que ça donne pour le moment. Une plateforme SI complète avec compliance NIS2 / ISO27001 en rust pour le back et react.js / tailwind pour le front. Elle regroupe un ITSM / Ticketing / Asset management / gestio…
David Seagal — Information Security Engineer / Security Operations Consultant
There is a security problem at the intersection of AI and software development that is growing faster than the industry is responding to it. AI coding tools, Copilot, Cursor, ChatGPT, Claude, Gemini, are now writing substantial portions of production code at most software compan…
Imrane T. — Offensive Security | Attack Chains & Business Logic
Started with a JS credential leak. Ended with: cross-tenant payments + webhook interception. Fintech APIs still break the same way: auth is there, isolation isn’t. Write-up (sanitized): https://medium.com/@insid_e/how-i-chained-a-hardcoded-password-into-a-cross-merchant-payment-…
Cybersecurity firm identifies 108 malicious Chrome extensions affecting 20,000 users Cybersecurity researchers have discovered a new campaign where a cluster of 108 Google Chrome extensions has been found to communicate with the same command-and-control (C2) infrastructure with…
I created a personal portfolio website using code to showcase my certifications, projects, skills, and more. This portfolio was built using React, Vite, and Tailwind CSS, and deployed using GitHub Pages. It includes responsive design and a modern UI to present my work in a clear…
🚀 Big update on my Private Cloud Manager project. Over the last iterations, I pushed it far beyond a simple VMware control panel and turned it into something that feels much closer to a real local-first operator console. What it does now: - 🖥️ Manage VMware Workstation Pro VMs…
Ajout du mode Dark / Light, amélioration de l'interface pour qu'elle colle au logo. Il n'est pas encore relié au back-end. A la base, le désire était de tout faire en Rust, mais c'était moche, d'où le changement de paradigme en partant sur React / Tailwind. A côté il y a le trai…
usama rasheed — Cybersecurity | Web Application Penetration Tester | Vulnerability Assessment | OWASP Top 10 | Burp Suite Professional
📰 Malicious sites use JavaScript to build malware in browser memory https://www.bleepingcomputer.com/news/security/malicious-sites-use-javascript-to-build-malware-in-browser-memory/ via BleepingComputer · 🛡️ Powered by Cyberr Threat Intelligence — platform.cyberr.ai/news
This time, Sam went for a more temporary and “hidden” approach for user authentication. Unfortunately for him, he forgot one small detail: users weren’t just clicking buttons, they actually knew their way around JavaScript. https://jjeuribe.github.io/posts/hackthissite-basic-lev…
🚀 Just shipped a new side project: Private Cloud Manager (PCM) Link to the repo : https://github.com/malek-annabi/private-cloud-manager A local VM control plane that turns your VMware Workstation Pro environment into a clean, web-based private cloud. As my homelab kept growing,…
Abou Sow — IT Support and Cybersecurity Professional
Has successfully verified Cisco Networking Academy – JavaScript Essentials (Cisco Networking Academy) and Cisco Networking Academy – Introduction to Cybersecurity (Cisco Networking Academy)
🧑💻Reason You Should Never Skip Reading JavaScript! Most automated tools missed this one. While manually reviewing a target's JavaScript last week, I discovered an 🔥"Open Redirect vulnerability" in the "returl" parameter used during authentication. This parameter was invisibl…
Browser Session Theft Through a Malicious Chrome Extension: A DFIR Case Study How browser artifacts exposed a policy-installed extension that stole authenticated web sessions without exploiting a browser CVE Executive Summary An unexpected forced logout from an internal administ…
MSHTML better known as Trident, is the web rendering engine used by Microsoft’s classic web browsers. It is the technology behind Internet Explorer, older versions of Outlook, Microsoft Office, and many other legacy Windows features. Historically, MSHTML (Trident) has been one o…
The OWASP Top 10 isn’t just a compliance checklist. It’s a real-world attacker playbook. Most developers know the names. Far fewer understand how these vulnerabilities are actually exploited during real attacks. While working on FinTech security assessments and web application p…