Learn how to perform a complete Security Review for new product features—from scoping and architecture analysis to threat modeling and risk assessment. Using a real-world chatbot integration example, this guide shows how to identify risks, apply security guardrails, and deliver actionable recommendations before release.

A security architecture review is a systematic assessment of an environment’s design, configuration, and controls to evaluate whether they meet security requirements and can withstand realistic threats. At some point, if you lean toward product or infrastructure security, you’ll inevitably find yourself doing a review like this. When I did my first one, I didn’t […]

A step-by-step TryHackMe Cyborg walkthrough to achieve root access. Learn essential techniques for web enumeration, SSH access, and privilege escalation.

Last month, On December 09 2021, The release of a Remote Code Execution POC over twitter involving exploitation of Apache’s log4j2 logging class took everyone’s peace away. The attack was pretty simple and the fact that it can be easily exploited by anyone is what made this more terrifying. The first edition of this attack […]

 Here is a list of 25 spices (মচলা) with their English and Assamese names. Assamese name = English name Ada (আদা) = Ginger (Scientific name : Zingiber officinale) Nohoru (নহৰু) = Garlic (Scientific name : Allium sativum) Piyaj (পিয়াজ) = Onion ( Scientific name : Allium cepa) Dhania (ধনিয়া) = Coriander ( Scientific name : Coriandrum sativum) Jeera (জিৰা) = Cumin

Aghun is one of the most important month of Assamese culture. The golden paddy fields give immense pleasure and happiness to the farmers. The months of  hard work turns into reward in terms of good crops and thereafter the time for celebration comes. In Assam, rice is considered as the principal crop and is also the main food.  During the Assamese aghun month which fall during November  and

Last month, On December 09 2021, The release of a Remote Code Execution POC over twitter involving exploitation of Apache’s log4j2 logging class took everyone’s peace away. The attack was pretty simple and the fact

Continue readingLog4Shell Quick Lab Setup for Testing

Insecure code management is when part of the code exposes sensitive information which shouldn’t be exposed to the world. Now it can happen in a lot of situation where the API keys/Passwords are hard-coded and

Continue readingInsecure Code Management – Git

In this article, we will be talking about setting up a basic Lab for testing Telemetry on a Cisco NC55XX router. Telemetry – “Tele” means remote, “metry” means metrics or measurements, together this word simply

Continue readingHow to setup your own Basic Telemetry Lab with Cisco XR