cropped cropped cybersecwriteupslogo.png
  • VAPT
  • Red Teaming
  • Tools & Scripts
  • Active Directory Pentesting
  • Pentesting Fundamentals
  • Google Dorking
  • VAPT
  • Red Teaming
  • Tools & Scripts
  • Active Directory Pentesting
  • Pentesting Fundamentals
  • Google Dorking
Latest writeups
Tools & Scripts

Top 20 Useful Burp Suite Extensions for Application Pentesting & Red Teaming

📅 December 17, 2025 ✏ khukuririmal

Burp Suite has become the de facto toolkit for security professionals assessing web applications. While the core product is powerful on its own, its real strength lies in its extensibility. The Burp…

Read writeup
Pentesting Fundamentals

Redefining the Traditional Black Box Web Application VAPT Approach

📅 December 17, 2025 ✏ khukuririmal

Black box testing is one of the most commonly used approaches in web application Vulnerability Assessment and Penetration Testing (VAPT). However, in practice, the definition of black box testing is often misunderstood,…

Read writeup
Pentesting Fundamentals

JavaScript File Analysis in VAPT: An Overlooked Goldmine for High-Impact Findings

📅 December 16, 2025 ✏ khukuririmal

In modern web applications, JavaScript (JS) is no longer a supporting component—it is the backbone of application logic, client-side security controls, API communication, and user interaction. Despite this, JavaScript file analysis remains…

Read writeup
Pentesting Fundamentals

The Importance of Technology Stack Enumeration in VAPT

📅 December 16, 2025 ✏ khukuririmal

In any vulnerability assessment, penetration test, or red-team engagement, technology stack enumeration is one of the earliest and most critical activities. Before a single exploit is attempted, before payloads are fired or…

Read writeup
Pentesting Fundamentals

Regex: The Unsung Hero Behind Modern VA Tools

📅 December 15, 2025 ✏ khukuririmal

When we talk about Vulnerability Assessment and Penetration Testing (VAPT), the first things that come to mind are using tools like Burp Suite, ZAP, Nmap, Nuclei, SQLMap, etc to perform VA, False…

Read writeup
VAPT

Vulnerability Assessment & Penetration Testing (VAPT): A Complete Guide for Modern Organizations

📅 December 14, 2025 ✏ khukuririmal

In an era where digital transformation is the backbone of every industry, cyberattacks have evolved faster than most organizations’ ability to defend themselves. From fintech companies securing millions of transactions per second,…

Read writeup
Red Teaming

Red Teaming: The Art of Real-World Cyber Attack Simulation

📅 December 13, 2025 ✏ khukuririmal

In a world where cyber attacks are becoming more targeted, more organized, and more frequent, organizations can no longer rely solely on firewalls, compliance checklists, and antivirus software. Real attackers don’t follow…

Read writeup
« Previous 1 … 3 4

YouTube

Subscribe on YouTube

Recent Posts

  • CMS Penetration Testing Guide: Security Test Cases for Popular CMS Platforms
  • 10 OSINT Website Categories for Red Teaming and Security Assessments
  • The New HTTP QUERY Method Explained: What It Might Mean for APIs and Application Testing
  • Top 20 Mobile Application Vulnerability Chaining Scenarios Every Pentester Should Know
  • Bluetooth Enumeration & GATT Analysis: A Practical BLE Security Assessment with TP-Link UB500 & Flipper Zero

Recent Comments

  • Bluetooth Enumeration & GATT Analysis: A Practical BLE Security Assessment with TP-Link UB500 & Flipper Zero - Cyber Security Writeups on Bluetooth Pentesting Lab Setup Guide: Building Your First BLE Security Lab with TP-Link UB500 and Flipper Zero
  • Sandip Parane on JavaScript File Analysis in VAPT: An Overlooked Goldmine for High-Impact Findings
  • HariHacks on Redefining the Traditional Black Box Web Application VAPT Approach

Archives

  • July 2026
  • June 2026
  • May 2026
  • April 2026
  • March 2026
  • February 2026
  • January 2026
  • December 2025
  • About
  • Contact
  • Disclaimer
  • Privacy Policy
    © 2026 Cyber Security Writeups · authorized testing only
    • About
    • Contact
    • Disclaimer
    • Privacy Policy