Blog

بررسی یک آسیب‌پذیری واقعی در قرارداد هوشمند: بازنویسی voucher سطح بالا توسط selectWinner با جایزه‌ی قدیمی سطح پایین

تحلیل یک یافته‌ی Medium از ممیزی پروژه Blue Markdown؛ بررسی این‌که چطور تابع selectWinner می‌تونه یک voucher فعال و ارزشمندتر رو با یک جایزه‌ی کم‌ارزش‌تر از دور قبلی overwrite کنه، به همراه کد نمونه، سناریو حمله و راه‌حل.

React2Shell (CVE-2025-55182) Exploitation: Real-World Incident Response to XMRig Cryptominer Attack

Complete incident response writeup of a React2Shell (CVE-2025-55182) vulnerability exploitation leading to XMRig cryptominer installation. Learn detection, analysis, remediation, and prevention strategies for this critical RCE vulnerability.

Breaking Android APK Security: A Real-World Case Study of Missing Signature Verification

Step-by-step guide to discovering and exploiting Android APK tampering vulnerability in mobile payment apps. Learn APK decompilation, Smali code injection, signature bypass, and security testing techniques.

Axionsec: A Comprehensive Guide to Agentic AI for Cybersecurity

Explore Axionsec, an open-source agentic AI framework for cybersecurity professionals to build intelligent autonomous agents for vulnerability discovery, exploitation, and threat defense

Red Team Methodology: A Comprehensive Guide

Learn the essential methodologies and techniques used by professional red team operators

Building Security Tools with Rust: A Practical Guide

Learn how to build fast, secure, and reliable security tools using Rust programming language

Building Secure Django Applications: Complete Security Guide

Learn how to build secure and production-ready Django applications with security best practices

Building High-Performance Security Tools and Microservices with Go

Learn to build fast, concurrent security tools and scalable microservices using Golang