Practitioner-grade cybersecurity content
Technical playbooks, war stories, and how-to-think guides — written by practitioners, anchored to the Indian context.
Want structured, step-by-step learning instead? Explore the Academy (guided courses) or the AI security hub.
Latest articles
Most recent practitioner playbooks across every track. Filter by topic in the sidebar, or use search.
Module 8 · John & Hashcat — Cracking Workflow
Why this module. Cracked hashes power lateral movement. Knowing how to crack quickly turns a low-impact LSASS dump into a Domain Admin…
AcademyModule 7 · sqlmap — Automated SQL Injection
Why this module. sqlmap automates 80% of SQLi work. Mastering it means going from “I think this is injectable” to “here’s the…
AcademyModule 15 · API Security in Microservices Mesh
Why this module. Most API-security advice covers north-south (internet to API). In microservices, east-west traffic (service to service) is 10x more volume…
AcademyModule 14 · API DDoS & Bot Mitigation
Why this module. APIs are bot magnets. Credential stuffing against /login, scraping of /products, account creation abuse, comment spam. Volumetric DDoS is…
AcademyModule 13 · API Penetration Testing Methodology
Why this module. API pentesting is different from web app pentesting. Less UI, more state, more business logic. The OWASP API Top…
AcademyModule 12 · SDKs as Attack Surface
Why this module. If you publish an SDK (Python, JS, mobile native), attackers analyse it to learn about your API’s structure, undocumented…
AcademyModule 11 · API Mocking & Contract Testing
Why this module. APIs evolve; consumers break. Contract testing catches it before production. From a security view, contract testing also catches “we…
AcademyModule 10 · WebAuthn & Passkeys for APIs
Why this module. Phishing-resistant auth is the only auth that holds up against modern proxy-phishing attacks (EvilGinx and similar). WebAuthn / Passkeys…
AcademyModule 9 · API Logging & Anomaly Detection
Why this module. APIs generate massive log volume; most teams collect it and never query it. Anomaly detection at the API layer…
AcademyModule 8 · mTLS for API-to-API Authentication
Why this module. “Service A authenticates to service B with an API key in a header” — the dominant pattern, and the…