NotesL LexiconInterview prep
FOXCONN SECURITY ENGINEER — MASTER INTERVIEW NOTES 1. First understand what job I am interviewing for I should not mentally classify this position as “SOC Analyst,” “Application Security Engineer,” or
Read on Lexicon
Blog & Essays
NotesL LexiconDiscussionsL LexiconTCP Handshake
Question How does it work --- Discussion scorpionxdev (OP) · Aug 8, 2026 asdasdhelfuhfeakdhine scorpionxdev (OP) · Aug 8, 2026 asfweoi;fjuwefaiohwkihaidhaha scorpionxdev (OP) · Aug 8, 2026 3rwe;dr9uwp
Read on LexiconBug BountyL LexiconOnly Bug Bounty Checklist You'll Ever Need!!! V2
Global Manual Bug Bounty Checklist Purpose: A target-agnostic, manual-first checklist for authorized web, API, SaaS, identity, business-logic, integration, and client-side testing. Important: No check
Read on LexiconBug BountyL LexiconOnly Bug Bounty Checklist You'll Ever Need!!!
Global Manual Bug Bounty Checklist Purpose: A target-agnostic, manual-first checklist for authorized web, API, SaaS, identity, business-logic, integration, and client-side testing. Important: No check
Read on LexiconWeb & APIsL LexiconUnderstanding REST APIs
What REST really means — resources, HTTP methods, status codes, headers, auth, versioning, pagination, and designing an API people enjoy using.
Read on LexiconSoftware CraftL LexiconDebugging Software Systematically
Debugging as a repeatable method, not luck — reproduce, isolate, form hypotheses, read the error, bisect, and the tools that make it faster.
Read on LexiconTools & WorkflowL LexiconA Practical Introduction to Git and Version Control
Git from first principles — the mental model, the everyday commands, branching, merging, undoing mistakes, and a sane workflow.
Read on LexiconReferenceL LexiconMarkdown formatting reference
A quick reference for GitHub-Flavored Markdown. The rendered output is on the left in your head; the source is below. Headings Emphasis Lists Links and images Code blocks Fence with three backticks an
Read on LexiconWritingL LexiconWriting Better Technical Documentation
How to write docs people actually read — knowing your reader, the four documentation types, structure, examples, and keeping docs alive.
Read on LexiconLearningL LexiconBuilding a Sustainable Learning System
A repeatable system for learning technical skills that actually stick — spaced repetition, projects, notes, and avoiding tutorial hell.
Read on LexiconSoftware CraftL LexiconHow to Structure a Software Project
A sensible way to lay out a codebase — folders by feature, separating concerns, config, naming, and structure that scales as the project grows.
Read on LexiconTools & WorkflowL LexiconIntroduction to Linux for Developers
The Linux a developer actually uses daily — the shell, files and permissions, processes, pipes, and the commands worth memorizing.
Read on LexiconLinuxL LexiconUseful Linux filesystem commands
A compact cheat sheet of filesystem commands I keep coming back to on the terminal. Moving around Finding things Disk usage When a disk fills up, du -sh sort -h from the root of the offending mount fi
Read on LexiconSoftware CraftL LexiconDesigning Clean and Maintainable User Interfaces
Building UIs that stay maintainable — component boundaries, state, consistency, accessibility, and design decisions your future self will thank you for.
Read on LexiconSoftware CraftL LexiconDebugging checklist
When something breaks and I have no idea why, I run through this list before touching any code. It turns panic into a process. 1. Reproduce it reliably A bug you cannot trigger on demand is a bug you
Read on LexiconJavaScriptL LexiconJavaScript async and await
async / await is syntax sugar over Promises that lets asynchronous code read top to bottom like normal code. Under the hood it is still Promises. The basics An async function always returns a Promise.
Read on LexiconWebL LexiconAPI pagination patterns
When a collection is too big to return at once, you paginate. There are two main patterns and choosing wrong causes real pain at scale. Offset pagination The classic approach: skip N rows, take the ne
Read on LexiconNetworkingL LexiconOSI Model
The complete OSI reference — every layer, its protocols, devices, headers, addressing, security, and how it maps to TCP/IP. One page, everything.
Read on LexiconProgrammingL LexiconStart Here — How to Solve a Problem
Stuck and can't solve even one problem? This is the gentle, from-zero guide to how problem solving actually works — solve by hand first, then code. A ~22 minute read.
Read on LexiconProgrammingL LexiconFrom if/else to DSA — The Whole Path
The complete beginner journey, explained gently and in full — decisions, loops, functions, recursion, every data structure, and the core algorithms. Read it over several sittings.
Read on LexiconNetworkingL LexiconTCP vs UDP
The two transport protocols compared in full — how each works, when to use which, headers, reliability, security, and where QUIC/HTTP-3 fits.
Read on LexiconProgrammingL LexiconProblem Solving
How to actually solve programming problems — the process, every pattern and when to use it, complexity, data structures, worked examples, and how to get good.
Read on LexiconNetworkingL LexiconTCP/IP Model
The 4-layer model the internet actually runs on — each layer, its protocols, how it maps to OSI, encapsulation, a real web request, and why it beat OSI.
Read on LexiconProgrammingL LexiconDSA Practice — Learn by Solving
A hands-on path through DSA: learn a pattern, solve real LeetCode problems with built-in Hint 1 / Hint 2 / Approach drop-downs, then the next pattern. A ~40 minute read + a lot of practice.
Read on LexiconProgrammingL LexiconC Programming
The full C lab notebook in one place — every classic program (Part A, B and C) with code, how it works, and sample output, plus a quick reference for I/O and operators.
Read on LexiconProgrammingL LexiconPython
Python from scratch — every fundamental explained clearly, building up to solving real problems, with links to the Problem Solving patterns and complexity.
Read on LexiconGitL LexiconGit commands I use every day
A short reference of the Git commands I actually reach for daily. Not exhaustive, just the ones that earn their keep. Checking state Staging and committing Use git add -p more than you think. Reviewin
Read on LexiconSecurityO Opus2026 in Security: A Month-by-Month Timeline (January–June)
A cited, month-by-month account of the most significant cybersecurity events of the first half of 2026 — the zero-days, the breaches, the ransomware shifts.
Read on OpusAIO OpusMythos and Fable 5: Anthropic's Most Powerful Models — and the Collision With Washington
Anthropic built a model tier above Opus, shipped its first public 'Mythos-class' model in Fable 5 — and walked straight into a national-security fight with the U.S. government. What the models do, and what officials actually said.
Read on Opus
securityM MediumCVE-2025–0282: How a One-Line Bug in Ivanti’s VPN Let Attackers Walk Through the Front Door
A balanced breakdown of the root cause, the exploit chain, and what defenders — and pentesters — should take away. The Setup Your VPN appliance is supposed to be the thing that kee
Read on Medium
cryptocurrencyM Medium“We Encrypt With AES-256” Is Not a Security Architecture
The questions nobody asks — and the attacks that follow when they don’t You’re in a security review. An engineer pulls up the architecture diagram and says the words: “All data at
Read on MediumSecurityO OpusThe Year of Edge Zero-Days: Why 2026 Belonged to the Perimeter
Cisco SD-WAN, Check Point VPN, and a string of perimeter appliance flaws made 2026 the year attackers owned the edge. A look at the CVEs, the pattern, and the defenses.
Read on OpusDevOpsL LexiconHow environment variables work
Environment variables are named values that live in a process and get inherited by the processes it spawns. They are the standard way to pass configuration and secrets into an app without hardcoding t
Read on LexiconSwiftL LexiconSwiftUI state management
SwiftUI rebuilds views from state. The trick is choosing the right property wrapper so ownership and updates flow the way you expect. The core property wrappers Wrapper Owns the data? Use for --- ---
Read on LexiconSecurityO OpusRansomware in 2026: Encryptionless, Post-Quantum, and AI-Assisted
Ransomware changed shape in 2026 — fewer locked files, more pure extortion, quantum-resistant ciphers, and AI in the loop. A data-backed look at where it's heading.
Read on OpusPerformanceL LexiconHow caching improves application performance
Caching is storing the result of expensive work so you can reuse it instead of redoing it. Done well it is the highest-leverage performance tool you have. Done badly it serves stale data and hides bug
Read on LexiconSecurityO OpusExtortion Without Encryption: The ShinyHunters Playbook of 2026
In 2026, the biggest data-theft story wasn't ransomware that locks files — it was extortion crews like ShinyHunters who simply steal and threaten to leak. Here's how it worked.
Read on OpusWebL LexiconUnderstanding HTTP status codes
Status codes are the server telling you what happened in one number. Learn the shape of each class and you can debug most APIs without reading a manual. The five classes Range Meaning --- --- 1xx Info
Read on LexiconKotlinL LexiconKotlin coroutines overview
Coroutines are Kotlin's answer to asynchronous programming. They let you write concurrent code that reads sequentially, without blocking threads. Suspend functions A suspend function can pause and res
Read on LexiconSecurityO OpusWhen Hacktivism Turns Destructive: Wipers and Geopolitics in 2026
2026 saw geopolitically motivated groups move from defacement and DDoS to destroying systems outright. A look at the actors, the incidents, and what defenders should take from it.
Read on OpusSQLL LexiconSQL joins explained
A join combines rows from two tables based on a related column. The join type decides what happens to rows that have no match. Sample tables Say we have users and orders , where each order has a user
Read on LexiconDatabasesL LexiconDatabase indexing basics
An index is a sorted lookup structure that lets the database find rows without scanning the whole table. It is the single biggest lever for query speed, and the most commonly overlooked. The book anal
Read on LexiconReactL LexiconReact component design principles
A handful of principles that keep React components easy to change. None of them are rules, but ignoring all of them tends to produce components that are painful to touch six months later. Keep compone
Read on LexiconSoftware CraftL LexiconClean code naming practices
Naming is the cheapest documentation you will ever write and the first thing the next reader sees. A good name removes the need for a comment. Say what it is, not how it is stored Name things after in
Read on LexiconEmbedded SecurityO OpusBuilding an HSM on a Cortex-M0+: Lessons from MITRE eCTF 2026
What it takes to make firmware keep its secrets when the attacker holds the chip — a build log of a hardware security module on a bare-metal ARM Cortex-M0+.
Read on OpusCritical InfrastructureO OpusModeling a City's Power Grid as a Graph
Treating the Boston metro electric grid as a network of nodes and edges reveals which substations matter most — and how the system fails under targeted attack versus random faults.
Read on OpusSecurityO OpusHardcoded Credentials in a Medical Infusion Pump: Anatomy of a Finding
Threat-modeling a clinical infusion pump turned up a known data-exposure CVE and a hardcoded-credentials weakness — a study in why medical devices stay vulnerable for years.
Read on OpusIoT SecurityO OpusAnatomy of an MQTT Broker DoS: From 600 MB to Outage
Three denial-of-service vectors that took a hardened Mosquitto broker from healthy to a 49-minute outage on a Raspberry Pi 4 — and the mitigations that stop them.
Read on OpusCryptographyO OpusLattice Attacks on ECDSA Nonce Reuse
Reuse or leak a few bits of an ECDSA nonce and the private key falls out — via simple algebra when the nonce repeats, and lattice reduction when only fragments leak.
Read on OpusDetection EngineeringO OpusWriting Snort Rules That Actually Catch Attacks
Building and tuning Snort detection for real CVE exploits and live reverse shells — in both passive IDS and inline IPS modes — and validating every rule against PCAP.
Read on Opus
CybersecurityThings I Do After Installing Kali Linux 2025.2 – My Full Setup
Full checklist and setup guide I follow after installing Kali Linux 2025.2 — perfect for ethical hacking and bug bounty.
Read post
CybersecurityRansomware Unmasked- The Definitive Guide
An in-depth, comprehensive guide to ransomware, covering its origins, technical workings, types, infection methods, prevention, detection, response, and the broader impact on organizations and individuals.
Read post
arch-linuxM MediumMy Journey: Discovering the Relationship Between Kali Linux and Black Arch
As a cybersecurity enthusiast and Linux explorer, I’ve spent considerable time with various security-focused distributions. Today, I want to share my personal journey of discoverin
Read on MediumThings I Do After Installing Kali Linux 2025.2 — My Full Setup
Things I Do After Installing Kali Linux 2025.2 — My Full Setup Hey everyone, I’m Dev I’ve been using Kali Linux for a while now for everything from learning to bug bounty to basic
Read on Medium
StatusBlogs Site Under Construction.
Placeholder note from when the blog section was under construction.
Read post
personal-experienceMy Journey Through the CEH Exam and Preparing for the OSCP
Reflecting on my experiences preparing for and taking the CEH exam, and my journey toward the OSCP certification.
Read post
personal-experienceCOVID-19 and Its Impact on the Digital World A Personal Journey
Reflecting on how the COVID-19 pandemic reshaped my digital experiences and the world around me
Read post
cybersecurityUnderstanding Fileless Malware A Comprehensive Exploration
An in-depth analysis of fileless malware, its mechanisms, impact, and countermeasures.
Read post
cybersecurityRansomware - The Invisible Chain
A deep dive into ransomware, its impact on modern cybersecurity, and best practices to defend against it
Read post
NetworkingThe Evolution of IP Addresses
How IP addresses evolved from ARPANET to IPv6, how they actually connect devices, and what that history means for cybersecurity today.
Read post
CybersecurityBounty Hawk
The story behind Bounty Hawk, a recon and bug bounty automation framework — why I built it, what it automates, and what hunting taught me along the way.
Read post