Blogging about security at OpenExploit.in
Knowledge is power—and perhaps the best way to acquire that knowledge is by using OSINT, or Open Source Intelligence. OSINT entails gathering information from open sources in order to gauge threats, conduct investigations, or simply become better informed about a target system. Among the numerous OSINT tools out there,
If you have a small website, do IT for a company, or simply an inquisitive security enthusiast, one thing is certain — you must scan for vulnerabilities before they are discovered and exploited by hackers.". But how do you go about doing that? In this article, we'll take
Your information is worth more than ever before. With every application you access, website you visit, or smart wear you put on, you're likely sharing data—sometimes knowingly, but more often than not without your knowledge. The following blog discusses why user awareness and consent in data collection
Keeping yourself informed on cybersecurity trends isn't optional—it's a necessity. But let's be real, not everyone has the time to sift through lengthy reports or research papers. That's where podcasts fill in. Here are the top 5 cybersecurity podcasts you should
Passwords are ubiquitous — from email and social media to banking and work accounts. But let's face it: passwords are annoying. They're difficult to recall, easy to forget, and not very secure. That's why Microsoft is making a significant leap by making passwordless authentication the
End-to-end encryption (E2EE) is usually touted as the best method to secure our messages and information. Signal, WhatsApp, and other apps feature E2EE as a means to guarantee nobody—not hackers, not the app developers, nor even governments—can access your messages. What if there exists a loophole that quietly
Have you ever clicked on a link believing you were heading to one website, only to discover yourself somewhere entirely different? If so, you've had what may be the consequence of an open redirect vulnerability. It may appear to be a little trick or a glitch, but this
Ethical hacking is a fast-paced and ever-evolving field. To stay up-to-date, build your network, and learn from the best, attending conferences is a great move. In 2025, several major cybersecurity conferences are offering hands-on training, expert talks, and networking opportunities for ethical hackers and security professionals. Whether you’re a
Our homes are more integrated than ever before. From smart TVs and virtual assistants to security cameras and baby monitors, our home networks are full of devices that constantly communicate with the internet. But with all that convenience comes danger—hackers view your home network as an open target if
Mobile apps are omnipresent—from social media and enterprise to payment wallets. But most are still open to attack. This handbook is your step-by-step tutorial on pentesting mobile apps in 2025 with code snippets, tool instructions, and advice. Tools Setup Below is a quick Android (Linux/macOS) setup: # Install ADB
Blockchain is described as "unhackable" and "future-proof," but how is it that it's so secure? Let's break the magic of blockchain into plain language — with actual code examples — to give you a sense of what's happening under the hood. Prefer
One of the most risky and most frequently used bugs is a privilege escalation vulnerability. It sounds like a mouthful, but in all honesty, the idea is very straightforward—and it's something you really should know about if you're interested in computer security. Prefer watching instead