Recently, I wanted to test personal AI assistants like Hermes, OpenClaw, and Grokbot. I wasn't particularly interested in finding out which model could score highest on another benchmark. I wanted to answer a much simpler question: How practical can these systems actually be? What purpose can an AI
Recently, I was asked by Swinburne University Vietnam to serve as a keynote speaker at SWIN-CRIDS 2026! This is a conference that enables industry professionals to share their experiences and guidance to young professionals and students! I was asked to serve as ISC2 Vietnam's Vice President and
Hey everyone! I am back today to share my adventure of speaking at different events and today I will be sharing my experience about discussing how different teams in the industry struggle to work together. Prep Let's be honest, I wasn't sure how to interpret a
So This year I have done two talks for Swinburne University Vietnam related to malware analysis. But this time we are trying to keep up with the times and use machine learning. In this blog I will speak about my experience prepping and presenting this workshop The Prep Teaching machine
So recently, I had the honor of teaching Malware analysis at Swinburne University in Vietnam! For context, I am the Vice President of the ISC Vietnam Chapter and have been teaching in some capacity for roughly 10 years. I was quite excited to teach this subject because malware analysis is
Hey everyone! I am back with another walkthrough, and this time we are trying a new website called Web Verse! They have some fun labs, and I highly recommend you check them out. Here is my walkthrough of the DockerHive challenge!
404Yeti here. Today we’re cutting into another BugForge challenge, this time focusing on Tanuki and an Insecure Direct Object Reference (IDOR) vulnerability hiding behind a simple numeric pattern. This is the kind of flaw attackers appreciate because it rarely looks dramatic at first. No loud errors. No obvious breakage.
1. 404Yeti here. Today we’re stepping into another BugForge challenge, this time carving open Cheesy Does It. What looked like an ordinary login portal turned out to be sitting on a brittle foundation. Under a little pressure, it cracked fast. This challenge revolves around a classic failure: SQL injection
1. Hey everyone — 404Yeti here, back with another BugForge challenge. Today we’re revisiting Cafe Club, but this time we’re focusing purely on an IDOR vulnerability and how it can scale into something much worse: mass account takeover. Let’s break it down. ❄️ Step 1: Create 2 accounts For
Hey everyone — 404Yeti here, back with another BugForge challenge. Today we’re revisiting Shady Oaks Financial, but this time… we’re breaking the bank using a race condition attack. ❄️ This one is all about timing, parallel requests, and exploiting logic flaws. Let’s get into it. Step 1. set up
Hey everyone — 404Yeti here, back with another BugForge challenge. Today we’re working on the GiftLab web app, and this one is a great example of why you should never trust encoded data just because it looks complicated. This challenge involves: * Shareable links * Base64 encoding * ID manipulation * IDOR vulnerability Let’
Hey everyone — 404Yeti here, back with another BugForge challenge. Today we’re working on the CopyPasta web app, and this one turns into a nice example of IDOR + password reset abuse, which is a dangerous combo in real applications. Step 1. Create an account As always, the first thing we