Completed: Guided Pentest: Infrastructure | TryHackMe I've completed the Guided Pentest: Infrastructure room on TryHackMe, where I practised the main stages of an infrastructure penetration test, from enumeration to privilege escalation. What I worked on -Nmap: Scanned the targe…
https://youtu.be/nBDgaOc-8MY Want to start your cybersecurity journey but aren't sure where to begin? Information Security Tutorials offers educational content designed to help you build a strong foundation in cybersecurity and develop practical skills step by step. 📚 Explore o…
Schomer — Principal Security Solutions Architect & Founder
The Last 24 Hours Proved It: Your Patch Management Strategy is Broken 🛑 Look at the threat intelligence feed from just the last day. It’s a total structural failure across the entire software stack: • Edge Infrastructure: Palo Alto PAN-OS (CVE-2026-0322) under active RCE exploi…
🚀 Let’s Learn Cybersecurity Together! I’m inviting all my LinkedIn followers, connections, and anyone interested in Cybersecurity to join my YouTube channel Information Security Tutorials. On the channel, I share practical and easy-to-follow content covering: 🔹 Cybersecurity F…
OPERATION RESOLVE & TRACE: SOC ANALYST CTF CHALLENGE: Challenge Scenario Your Security Operations Center (SOC) SIEM has raised alerts regarding anomalous network traffic and DNS queries generated by multiple hosts. As a Tier-1 SOC Analyst, you are assigned a specific target doma…
Module 6 — Vulnerability Analysis is live on iscsecurity.org. This is the module after enumeration: turning a target list into a prioritized, evidence-backed vulnerability picture. Authenticated vs. unauthenticated scans, false positive triage, CVSS/EPSS scoring, and reporting t…
Yesterday, we started diving into Vulnerability Management... risk, CVEs, CVSS, risk matrices, and all the good stuff that comes with it. Today, we're taking it a step further with a hands-on Nessus lab. We'll be using the Nessus Vulnerability Scanner to scan: - Our Metasploitab…
Module 5 — Enumeration is live on iscsecurity.org. This is the module after scanning: users, groups, shares, services, NetBIOS/SMB, LDAP/AD, SNMP. Lab-only. Isolated topology. What shipped: - Scenario-style walkthroughs against the reference lab (CLIENT01, DC01, SQL01, WEB01, AP…
📢 Shared from CyberShift Built something I wish existed when I was starting out. A full cybersecurity home lab walkthrough, beginner level, no fluff. You go from zero to running live Nmap scans between a Kali VM and a Windows host in under 30 minutes. I also added 8 quiz checkp…
Search Engines Are Passive Reconnaissance Sensors: Search engines are the most accessible intelligence platform on the internet. Used correctly, they let you map attack surfaces, exhume deleted content, and fingerprint internal infrastructure without sending a single packet to t…
📄 Released: DIBs Whitepaper v1.0.1 DIBs (Domain Intelligence & Behaviour System) is a Domain Intelligence and Behaviour Analysis framework designed to generate, resolve, enrich, and correlate large-scale domain ecosystems. Built around active domain generation, DNS resolution,…
🏆 Voting is open — I need your support! I'm honoured to be nominated for the Arab Cybersecurity Social Media Influencer Award 2026, part of the Arab Security Conference (10th Edition)! This nomination means a lot — it reflects the time we've spent together building real cyberse…
CYT open-source surveillance project. Running inside a briefcase. BlackHat Arsenal ready. It's called Chasing Your Tail-NG - a Wi-Fi probe request analyzer that tracks devices trying to track you. I've been building it in the open. Iterating in public. Posting on Substack every…
Hey all, Module 4 is live. Ethical Hacking track; Scanning Networks is up on iscsecurity.org. Host discovery, port scanning, service and version detection, OS fingerprinting, and the timing and OPSEC choices that keep a sweep useful instead of noisy. Dual-sided as always: how th…
There is nothing quite like watching students go from complete beginners to confidently executing live cyber attacks and defenses. This week at Drillerbyte, our current CyberShift cohort kicked off their presentation sessions. We require our students to present everything they h…
Why did I miss my Nutanix exam today? Because I am getting ready to impact a new breed of cyber minds at the Drillerbyte 4-Week Intensive Cybersecurity Training! Today is Day Zero, and I will be guiding our students through getting their systems completely lab-ready. We are ins…
Spent the whole day putting my lab behind Cloudflare Zero Trust, and for a moment I thought, “This is clean.” Then I ran Nmap for a target, and the network started lying to my face. The second I saw fabricated scan results and service visibility that didn’t reflect the actual la…
Salt Typhoon: What Happened and What It Means Chinese state hackers (Salt Typhoon/MSS) spent up to 18 months inside nine major US telecoms. Six were breached through a single shared IT contractor. Three through unpatched Cisco and Fortinet systems - patches had been available fo…
Luís Philip Angelo Wermelinger — Pesquisador de Segurança / Bug Bounty
A misconfiguration chain that gave me root on a lab box — without a single credential. Last week I worked through an NFS + rsync chain in my offensive security lab. The technique is straight out of a real Bug Bounty playbook. The target had: • NFSv3 exported to * (any host) • rs…
I'm a Network and Telecommunications Engineer, and based on my minor, I'm also a Network and System Administrator, including my current major that is a M.S. in Cybersecurity & Information Assurance at Western Governors University. My experience and skills are supported by profes…
Most cybersecurity professionals spend their careers mastering tools—Nessus, Qualys, Burp, Nmap, and managing endless SIEM alerts. But throughout the UAE and GCC markets, I’ve observed a consistent truth: Tools get you shortlisted, but critical thinking gets you hired. I have se…
Most people open a PCAP file and just scroll through packets. Today, I extracted actionable insight from one. Using Python (no GUI tools), I analyzed raw packet data and: ✔ Parsed PCAP structure manually ✔ Automated packet counting logic ✔ Extracted 460 packets from network traf…
I set out to build something simple: a Windows VM to safely analyse malware samples, with Wireshark capturing the traffic. That "simple" project turned into two days of network engineering. First, VM networking wouldn't cooperate. Then I realised capturing traffic on the host wo…