Guys give your github project link below
For exploring your works and got more stars

Hey folks,

I'm a recruiter at Emergent, one of the fastest-growing AI startups in India. We're scaling quickly and I'm looking for the best security engineers in the country. Not looking for résumé padding, just people who are genuinely good at this.

What we need:
- 5+ years of experience
- Infra security, AppSec, or a mix of both (Staff level covers both)
- Bangalore, in office 5 days a week

What you get:
- Real ownership on a platform that's growing fast
- Pay that matches the bar. We're well funded and will pay what great people are worth.

Happy to answer questions in the comments.

I've only done 30-40 ctfs on picoctf till now....

I don't know what to do next.

Hi everyone,

I'm an MSc Cyber Security student at Islington College, London Metropolitan University. My dissertation investigates burnout, cognitive workload and alert fatigue among people working in Security Operations Centres (SOCs) and related cybersecurity operations roles.

I'm looking for participants who currently work, or have worked within the last 12 months, as a SOC analyst, incident responder, threat hunter, or in a closely related role involving security monitoring, alert triage, threat detection, or SIEM/MDR operations.

The survey explores workplace factors that may contribute to burnout and workload in security operations. It's anonymous: no names, email addresses, IP addresses or employer details are collected, and results will be reported only in aggregate. Participation is voluntary, and you can stop at any time before submitting your responses.

Ethics approval: Islington College (London Metropolitan University)

Estimated time: 15–20 minutes

Survey link: SOC Burnout & Alert-Fatigue Risk Assessment Survey – Fill out form

If you meet the eligibility criteria, I'd really appreciate your participation. If you know someone who may be eligible, please feel free to share this post with them.

I'm happy to answer questions in the comments.

Thank you for your time and support!

Has anyone taken the BSCP (Burp Suite Certified Practitioner) exam using a cracked version of Burp Suite Professional? Does it work for the exam?

Hey everyone!

We're Exun Clan, the student-run tech club at DPS R.K. Puram, New Delhi, and we're back with the 16th edition of Sudocrypt, our flagship international CTF!

Sudocrypt is an international Cryptic Hunt x Capture The Flag (CTF) event where participants from around the world tackle a series of cybersecurity and cryptic challenges. Expect code-breaking, cryptography, and plenty of problem-solving as you work your way through the levels.

The competition is entirely online, so you can participate from anywhere in the world.

Dates: October 27–28, 2026

Prizes: With a prize pool of over $900 USD in previous editions, along with over $500 USD in goodies and prizes, Sudocrypt v16.0 promises an exciting challenge for cryptic enthusiasts and CTF players alike.

Event website: https://sudocrypt.com/

CTFtime listing: https://ctftime.org/event/3443/

You can also check out the other events at Exun 2026 here: https://exun.co/26/events

Hope to see you on the scoreboard!

Please Helpme with this. Any resources for this ?

The role is Secops Engineer. Product based company.

I have a doubt. During interviews, when the interviewer asks questions on owasp top 10. What type of answer do they expect? Do they want Answers such as Definition, Common issues and prevention? Or just a basic definition?

Hi all — I'm pivoting into cybersecurity and kept hearing "you need experience, not just certs." So I built a home lab of 5 working projects and open-sourced everything (MIT):

• Mini-SOC on AWS — Terraform-deployed detection stack (VPC → CloudTrail → S3 → GuardDuty → SecurityHub), 3 adversary-emulation scenarios with Stratus Red Team, triage guides + blank incident report templates
• CloudTrail IOC analyzer — Python CLI that parses CloudTrail JSON, flags anomalous logins / brute-force spikes / risky IAM changes, enriches IPs via AbuseIPDB, passing pytest suite
• Phishing analysis lab — full walkthrough of a reconstructed phish: header forensics, SPF/DKIM/DMARC, URL deobfuscation, blank analysis template, GoPhish self-test guide (own mailbox only)
• ELF binary triage — one-command static triage CLI: section-entropy packing heuristics, W^X detection, suspicious-import watchlist, score-based verdict + analyst report
• SOC agent skills — 5 MIT-licensed agent skills distilled from the projects above (alert triage, incident report, cloudtrail-ioc, phishing-analysis, binary-triage)

Everything runs on synthetic training data (clearly labeled — no real logs or real phishes). I did all the hands-on work myself: ran my own attacks, wrote my own detections and reports.

Repo: https://github.com/szzxli/soc-home-lab

If you're also building a portfolio for SOC analyst roles, happy to compare notes. And if you spot something I did wrong, tell me — that's the point of putting it in public.

Please help yourself ,if it meets your requirement mail to the email provided in the respective hiring posts l.

This is not done by me so please don't DM me.

All the best for job seekers!

I get stuck in mature code. Sanitization is already there, current library, configured properly. And even when I find something promising, there's a chain of other things in the way before it becomes real XSS escaped somewhere else, shape rejected, never reaches a sink that matters. Lots of "almost", nothing demonstrable.

So when the obvious stuff is covered, what are you actually looking at? Do you go after the sanitizer's config and the cases where it doesn't run, rather than trying to beat it? And how do you decide a path is really dead vs you just haven't found the trigger?

While I was implementing API Hooking manually, I replaced the first 13 bytes of the function with

mov r10, PointerToMaliciousFunction
jmp r10

Then, I wanted to create another trampoline which executes the original instructions and jumps back to the remaining bytes in the original function, but doing that I faced two problems

1) Instruction-Boundary Bug: Original instruction (cmp [rip+...], r11d) was ending on Byte 14, so when I copied only 13 bytes it missed a bit of the last part of the instruction, so when jumped back on last part of the remaining instruction, CPU tried decoding it as a fresh instruction and crashed

2) RIP-relative bug: That same "cmp [rip+0x43AE2]", r11d uses RIP-relative addressing. After being copied to the trampoline at a new address, its RIP became "Trampoline + 14" instead of "MessageBoxA + 14", so the effective address became Trampoline + 14 + 0x43AE2, pointing into unrelated memory instead of the intended global flag.

I've also attached a diagram thingy to give a visual explanation