https://1200km.com/ CTI-to-detection research, AdversaryGraph updates, malware analysis, detection engineering, security labs, and analyst tooling by Andrey Pautov. en Fri, 02 Oct 2026 00:00:00 GMT 1440 https://1200km.com/articles/read/2026/2026-10-02-the-right-question-a-framework-for-auditable-question-discovery-e69142b6d0b5/ https://1200km.com/articles/read/2026/2026-10-02-the-right-question-a-framework-for-auditable-question-discovery-e69142b6d0b5/ Fri, 02 Oct 2026 00:00:00 GMT The Right Question: A Framework for Auditable Question Discovery. A framework for using AI to discover, challenge, and prioritize empirical questions that. https://1200km.com/articles/read/2026/cyberattacks-on-big-pharma-and-its-ecosystem/ https://1200km.com/articles/read/2026/cyberattacks-on-big-pharma-and-its-ecosystem/ Sat, 26 Sep 2026 00:00:00 GMT Evidence-based pharmaceutical cyberattack research: threat actors, attack surfaces, source-qualified TTPs, and practical defensive lessons. https://1200km.com/articles/read/2026/adversarygraph-pcap-investigation-stories/ https://1200km.com/articles/read/2026/adversarygraph-pcap-investigation-stories/ Wed, 23 Sep 2026 00:00:00 GMT Can AdversaryGraph Tell the Story of a Malware PCAP?. Twenty malware PCAP tests with real AdversaryGraph screenshots, short reports, IOC checks. https://1200km.com/articles/read/2026/2026-09-20-adversarygraph-vs-ten-malware-pcaps-evidence-7dfd6a0917cf/ https://1200km.com/articles/read/2026/2026-09-20-adversarygraph-vs-ten-malware-pcaps-evidence-7dfd6a0917cf/ Sun, 20 Sep 2026 00:00:00 GMT AdversaryGraph vs Ten Malware PCAPs: What the Evidence Actually Shows. Ten live-instance malware-PCAP tests with 20 original screenshots, ten full reports. https://1200km.com/articles/read/2026/2026-09-18-ai-agent-vs-human-with-wireshark-six-malware-pcaps-put-to-the-test-63ffeaed97de/ https://1200km.com/articles/read/2026/2026-09-18-ai-agent-vs-human-with-wireshark-six-malware-pcaps-put-to-the-test-63ffeaed97de/ Fri, 18 Sep 2026 00:00:00 GMT 2026-09-19T00:00:00Z AI Agent vs. Human with Wireshark: Six Malware PCAPs Put to the Test. This experiment measures how Daybreak Blue at extra-high reasoning investigated six. https://1200km.com/learning-paths/agent-permission-validation/ https://1200km.com/learning-paths/agent-permission-validation/ Wed, 09 Sep 2026 00:00:00 GMT Run a benign local permission simulator and check allow/deny decisions, audit completeness, and negative controls. https://1200km.com/learning-paths/command-shell-validation/ https://1200km.com/learning-paths/command-shell-validation/ Wed, 09 Sep 2026 00:00:00 GMT Read benign synthetic process events and verify a narrow detection candidate with positive and negative controls. https://1200km.com/learning-paths/safe-artifact-triage/ https://1200km.com/learning-paths/safe-artifact-triage/ Wed, 09 Sep 2026 00:00:00 GMT Inspect a deterministic benign ZIP with hashes, structured observations, corroboration, and negative controls. https://1200km.com/ai-attack-statistics/ https://1200km.com/ai-attack-statistics/ Sat, 29 Aug 2026 00:00:00 GMT Analyze 111 publications and 103 eligible CTI records mapping attacker use of AI, evidence strength, research limits, datasets, and reproducible methods. https://1200km.com/articles/read/2026/2026-08-19-course-review-trainsec-malware-analyst-professional-level-1-203ca89b76a2/ https://1200km.com/articles/read/2026/2026-08-19-course-review-trainsec-malware-analyst-professional-level-1-203ca89b76a2/ Wed, 19 Aug 2026 00:00:00 GMT 2026-09-19T00:00:00Z Course Review — TrainSec Malware Analyst Professional — Level 1. A practical review of TrainSec's Malware Analyst Professional Level 1 course, its learning. https://1200km.com/articles/read/2026/2026-08-15-ai-security-course-module-00-chapter-4-b8e3de0c3a9d/ https://1200km.com/articles/read/2026/2026-08-15-ai-security-course-module-00-chapter-4-b8e3de0c3a9d/ Sat, 15 Aug 2026 00:00:00 GMT AI Security Course, Module 00 — Chapter 4. Trace an LLM request from structured messages to generated output, then place authorization, validation, and. https://1200km.com/articles/read/2026/2026-08-13-aidebug-3-1-full-release-review/ https://1200km.com/articles/read/2026/2026-08-13-aidebug-3-1-full-release-review/ Thu, 13 Aug 2026 00:00:00 GMT AIDebug 3.1 Full Release Review: From Binary Intake to String Intelligence. A complete, evidence-first review of AIDebug 3.1 covering static triage, PE. https://1200km.com/adversarygraph/ https://1200km.com/adversarygraph/ Wed, 12 Aug 2026 18:14:10 GMT 2026-08-14T00:00:00Z AdversaryGraph v7.0.0 is merged and CI-validated on main; the latest published stable GitHub release is v7.0.0. The documented stable release is v7.0.0. Main declares 8.0.0-beta.1 at commit 27de0b1, checked October 5, 2026. Development is separate from the latest published stable release; no beta production-validation claim is made. https://1200km.com/articles/read/2026/2026-08-12-strings-analysis-for-malware-analysis-turning-391815ee35e2/ https://1200km.com/articles/read/2026/2026-08-12-strings-analysis-for-malware-analysis-turning-391815ee35e2/ Wed, 12 Aug 2026 00:00:00 GMT Strings Analysis for Malware Analysis: Turning Binary Text into Defensible Hypotheses. Turn extracted binary text into defensible malware-analysis hypotheses. https://1200km.com/articles/read/2026/2026-08-10-pe-file-structure-for-malware-analysis-d93acb97d9f3/ https://1200km.com/articles/read/2026/2026-08-10-pe-file-structure-for-malware-analysis-d93acb97d9f3/ Mon, 10 Aug 2026 00:00:00 GMT PE File Structure for Malware Analysis: A Practical Guide. Understand Windows PE files for malware analysis: headers, sections, imports, exports, resources. https://1200km.com/articles/read/2026/2026-08-09-assembly-for-malware-analysis-be0679241940/ https://1200km.com/articles/read/2026/2026-08-09-assembly-for-malware-analysis-be0679241940/ Sun, 09 Aug 2026 00:00:00 GMT Assembly for Malware Analysis: A Practical x86/x64 Guide. Learn how to read x86 and x64 assembly for malware analysis with hands-on AIDebug labs covering. https://1200km.com/articles/read/2026/2026-08-08-ai-security-course-module-00-chapter-3-1bf0411472f6/ https://1200km.com/articles/read/2026/2026-08-08-ai-security-course-module-00-chapter-3-1bf0411472f6/ Sat, 08 Aug 2026 00:00:00 GMT AI Security Course, Module 00 — Chapter 3: Neural Networks and Optimization. This chapter explains neural-network computation, optimization, reproducibility. https://1200km.com/articles/read/2026/2026-08-07-how-to-build-a-safe-malware-analysis-lab-with-flare-vm-remnux-and-inetsim-0287d3964602/ https://1200km.com/articles/read/2026/2026-08-07-how-to-build-a-safe-malware-analysis-lab-with-flare-vm-remnux-and-inetsim-0287d3964602/ Fri, 07 Aug 2026 00:00:00 GMT 2026-09-19T00:00:00Z How to Build a Safe Malware Analysis Lab with FLARE-VM, REMnux, and INetSim. A practical, safety-first guide to preparing an isolated Windows. https://1200km.com/articles/read/2026/2026-08-06-what-is-malware-93746950ce9a/ https://1200km.com/articles/read/2026/2026-08-06-what-is-malware-93746950ce9a/ Thu, 06 Aug 2026 00:00:00 GMT What Is Malware?. Malware, short formalicious software, is software or code intentionally used to compromise the confidentiality, integrity, or availability. https://1200km.com/articles/read/2026/2026-08-02-ai-security-course-module-00-part-2-69381c74a59c/ https://1200km.com/articles/read/2026/2026-08-02-ai-security-course-module-00-part-2-69381c74a59c/ Sun, 02 Aug 2026 00:00:00 GMT AI Security Course, Module 00 — Part 2. Data, features, labels, parameters, hyperparameters, training, validation, testing, and inference are different. https://1200km.com/articles/read/2026/2026-08-01-ai-security-course-module-00-part-1-introduction-ai-ml-taxonomy-2e26c0740a17/ https://1200km.com/articles/read/2026/2026-08-01-ai-security-course-module-00-part-1-introduction-ai-ml-taxonomy-2e26c0740a17/ Sat, 01 Aug 2026 00:00:00 GMT AI Security Course, Module 00 — Part 1: Introduction, AI/ML Taxonomy. AI security conversations often begin with prompt injection, jailbreaks, or a new. https://1200km.com/articles/read/2026/2026-07-31-i-m-building-an-ai-security-engineering-course-55e29e6c035e/ https://1200km.com/articles/read/2026/2026-07-31-i-m-building-an-ai-security-engineering-course-55e29e6c035e/ Fri, 31 Jul 2026 00:00:00 GMT I’m Building an AI Security Engineering Course. AI security has moved beyond a narrow conversation about prompt injection https://1200km.com/articles/read/2026/2026-07-23-adversarygraph-40df3439b90c/ https://1200km.com/articles/read/2026/2026-07-23-adversarygraph-40df3439b90c/ Thu, 23 Jul 2026 00:00:00 GMT AdversaryGraph. AdversaryGraph is a self-hosted security intelligence workbench for teams that need to move from threat reports and observables to reviewed. https://1200km.com/articles/read/2026/2026-07-11-newest-detection-engineering-techniques-from-rules-to-validated-security-telemetry-a5ccb46d5556/ https://1200km.com/articles/read/2026/2026-07-11-newest-detection-engineering-techniques-from-rules-to-validated-security-telemetry-a5ccb46d5556/ Sat, 11 Jul 2026 00:00:00 GMT Newest Detection Engineering Techniques: From Rules to Validated Security Telemetry. 7. Technique 4: Weak-Signal Aggregation and Risk-Based Alerting https://1200km.com/newest-detection-engineering-techniques/ https://1200km.com/newest-detection-engineering-techniques/ Sat, 11 Jul 2026 00:00:00 GMT Read a practical guide to modern detection engineering, from telemetry and ATT&CK mapping to detection-as-code, validation, tuning, and analyst handoff. https://1200km.com/articles/read/2026/2026-07-07-when-ai-coding-agents-say-yes-too-easily-testing-suspicious-cybersecurity-prompts-in-curso-55eea06b69bd/ https://1200km.com/articles/read/2026/2026-07-07-when-ai-coding-agents-say-yes-too-easily-testing-suspicious-cybersecurity-prompts-in-curso-55eea06b69bd/ Tue, 07 Jul 2026 00:00:00 GMT When AI Coding Agents Say Yes Too Easily: Testing Suspicious Cybersecurity Prompts in Cursor. I ran a small test inside Cursor to compare how different AI. https://1200km.com/articles/read/2026/2026-07-03-comprehensive-cyber-intelligence-research-attacks-against-embedded-systems-hardware-firmwa-8a151f8d5f1b/ https://1200km.com/articles/read/2026/2026-07-03-comprehensive-cyber-intelligence-research-attacks-against-embedded-systems-hardware-firmwa-8a151f8d5f1b/ Fri, 03 Jul 2026 00:00:00 GMT Comprehensive Cyber Intelligence Research: Attacks Against Embedded Systems, Hardware, Firmware…. 2. Post-compromise persistence is the real risk, not only. https://1200km.com/embedded-systems-hardware-firmware/ https://1200km.com/embedded-systems-hardware-firmware/ Fri, 03 Jul 2026 00:00:00 GMT Embedded Systems, Hardware, Firmware. Source-verified CTI research on embedded systems, edge appliances, BMC, UEFI… https://1200km.com/articles/read/2026/2026-06-29-adversarygraph-v5-0-from-cti-mapping-to-attack-simulation-and-siem-validation-21873b2a6c39/ https://1200km.com/articles/read/2026/2026-06-29-adversarygraph-v5-0-from-cti-mapping-to-attack-simulation-and-siem-validation-21873b2a6c39/ Mon, 29 Jun 2026 00:00:00 GMT AdversaryGraph v5.0: From CTI Mapping to Attack Simulation and SIEM Validation. How can a security team move from threat intelligence to detection. https://1200km.com/articles/adversarygraph-from-log-to-report-ioc-investigation.html https://1200km.com/articles/adversarygraph-from-log-to-report-ioc-investigation.html Sat, 27 Jun 2026 00:00:00 GMT From Log to Report: Using AdversaryGraph to Turn Firewall and EDR Noise Into a CTI Investigation. From Log to Report: Using AdversaryGraph to Turn Firewall… https://1200km.com/articles/read/2026/2026-06-26-adversarygraph-v4-0-i-added-a-full-malware-analysis-workbench-to-my-self-hosted-cti-platfo-8dfbf1db2c9e/ https://1200km.com/articles/read/2026/2026-06-26-adversarygraph-v4-0-i-added-a-full-malware-analysis-workbench-to-my-self-hosted-cti-platfo-8dfbf1db2c9e/ Fri, 26 Jun 2026 00:00:00 GMT AdversaryGraph v4.0: I Added a Full Malware Analysis Workbench to My Self-Hosted CTI Platform. You upload a sample to one tool for hash reputation. You open. https://1200km.com/articles/read/2026/2026-06-21-from-log-to-report-using-adversarygraph-eff2e1d8f2cd/ https://1200km.com/articles/read/2026/2026-06-21-from-log-to-report-using-adversarygraph-eff2e1d8f2cd/ Sun, 21 Jun 2026 00:00:00 GMT From Log to Report: Using AdversaryGraph!. The harder problem is turning scattered technical evidence into a defensible investigation https://1200km.com/articles/adversarygraph-v2-self-hosted-ai-cti-platform.html https://1200km.com/articles/adversarygraph-v2-self-hosted-ai-cti-platform.html Fri, 19 Jun 2026 00:00:00 GMT 2026-06-27T00:00:00Z Historical: AdversaryGraph v4 Capability Map. Historical, version-specific AdversaryGraph v4 capability map. The… https://1200km.com/articles/read/2026/2026-06-19-adversarygraph-usecases-820d03c3a7ab/ https://1200km.com/articles/read/2026/2026-06-19-adversarygraph-usecases-820d03c3a7ab/ Fri, 19 Jun 2026 00:00:00 GMT AdversaryGraph Usecases. AdversaryGraph v2.5: New Name, New Release, Full AI CTI Platform Capability Map https://1200km.com/articles/read/2026/2026-06-19-adversarygraph-v2-5-new-name-new-release-full-ai-cti-platform-capability-map-93cd9224127e/ https://1200km.com/articles/read/2026/2026-06-19-adversarygraph-v2-5-new-name-new-release-full-ai-cti-platform-capability-map-93cd9224127e/ Fri, 19 Jun 2026 00:00:00 GMT AdversaryGraph v2.5: New Name, New Release, Full AI CTI Platform Capability Map. This release marks an important transition for the project: the tool now has. https://1200km.com/articles/read/2026/2026-06-16-adversarygraph-v2-0-i-built-a-self-hosted-ai-threat-intelligence-platform-941a80cc5a65/ https://1200km.com/articles/read/2026/2026-06-16-adversarygraph-v2-0-i-built-a-self-hosted-ai-threat-intelligence-platform-941a80cc5a65/ Tue, 16 Jun 2026 00:00:00 GMT AdversaryGraph v2.0: I Built a Self-Hosted AI Threat Intelligence Platform. A report is not enough. A PDF from a vendor, an incident response write-up, a. https://1200km.com/articles/read/2026/2026-06-07-adversarygraph-i-built-a-self-hosted-ai-threat-intelligence-platform-here-s-how-to-use-it-0aa7673e6bd8/ https://1200km.com/articles/read/2026/2026-06-07-adversarygraph-i-built-a-self-hosted-ai-threat-intelligence-platform-here-s-how-to-use-it-0aa7673e6bd8/ Sun, 07 Jun 2026 00:00:00 GMT AdversaryGraph: I Built a Self-Hosted AI Threat Intelligence Platform — Here’s How to Use It. GitHub - anpa1200/threatmapper: AI-powered MITRE ATT&CK threat. https://1200km.com/articles/read/2026/2026-05-30-cti-as-a-code-in-practice-reactive-investigation-lifetech-pharma-3e6574b7b85f/ https://1200km.com/articles/read/2026/2026-05-30-cti-as-a-code-in-practice-reactive-investigation-lifetech-pharma-3e6574b7b85f/ Sat, 30 May 2026 00:00:00 GMT CTI as a Code in Practice: Reactive Investigation — LifeTech Pharma. All organizations, names, and data are fictional. This is training assignment A01 from. https://1200km.com/articles/read/2026/2026-05-29-cti-as-a-code-complete-step-by-step-methodology-dda5ef496a46/ https://1200km.com/articles/read/2026/2026-05-29-cti-as-a-code-complete-step-by-step-methodology-dda5ef496a46/ Fri, 29 May 2026 00:00:00 GMT CTI as a Code: Complete Step-by-Step Methodology. The evidence problem.An analyst writes “the adversary used T1078” in a report. Six months later nobody can. https://1200km.com/articles/read/2026/2026-05-23-operation-desert-hydra-ai-assisted-cti-pipeline-muddywater-to-kibana-34da7917acf0/ https://1200km.com/articles/read/2026/2026-05-23-operation-desert-hydra-ai-assisted-cti-pipeline-muddywater-to-kibana-34da7917acf0/ Sat, 23 May 2026 00:00:00 GMT Operation Desert Hydra — AI-Assisted CTI Pipeline: MuddyWater to Kibana. Most threat actor writeups stop too early. They describe the group, list ATT&CK. https://1200km.com/articles/read/2026/2026-05-22-one-place-for-my-cybersecurity-projects-guides-articles-labs-tools-and-research-workflows-5d358753c86c/ https://1200km.com/articles/read/2026/2026-05-22-one-place-for-my-cybersecurity-projects-guides-articles-labs-tools-and-research-workflows-5d358753c86c/ Fri, 22 May 2026 00:00:00 GMT One place for my cybersecurity projects, guides, articles, labs, tools, and research workflows. Andrey Pautov - CTI, Detection Engineering & Security Research https://1200km.com/articles/read/2026/2026-05-21-the-intelligent-shield-opencti-057c9b4b9394/ https://1200km.com/articles/read/2026/2026-05-21-the-intelligent-shield-opencti-057c9b4b9394/ Thu, 21 May 2026 00:00:00 GMT The Intelligent Shield. OpenCTI. In an era of relentless and complex cyber attacks, traditional, manual threat intelligence cannot keep pace. Security teams. https://1200km.com/articles/read/2026/2026-05-18-cti-analyst-field-manual-complete-reference-ef2a370bb21f/ https://1200km.com/articles/read/2026/2026-05-18-cti-analyst-field-manual-complete-reference-ef2a370bb21f/ Mon, 18 May 2026 00:00:00 GMT CTI Analyst Field Manual — Complete Reference. A practitioner field manual for cyber threat intelligence: from collection requirements to production detection. https://1200km.com/articles/read/2026/2026-05-13-customer-driven-ai-cti-project-c0db3cdc1830/ https://1200km.com/articles/read/2026/2026-05-13-customer-driven-ai-cti-project-c0db3cdc1830/ Wed, 13 May 2026 00:00:00 GMT Customer-Driven AI CTI Project. Full Workflow Quick Reference https://1200km.com/articles/read/2026/2026-05-12-customer-driven-ai-cti-project-template-part-2a-phase-by-phase-execution-guide-f9751a8bcb59/ https://1200km.com/articles/read/2026/2026-05-12-customer-driven-ai-cti-project-template-part-2a-phase-by-phase-execution-guide-f9751a8bcb59/ Tue, 12 May 2026 00:00:00 GMT Customer-Driven AI CTI Project Template. Part 2A: Phase-by-Phase Execution Guide. From pure CTI to hands-on detection engineering with strict validation gates. https://1200km.com/articles/read/2026/2026-05-12-customer-driven-ai-cti-project-template-part-2b-reference-toolkit-3a56fab0b943/ https://1200km.com/articles/read/2026/2026-05-12-customer-driven-ai-cti-project-template-part-2b-reference-toolkit-3a56fab0b943/ Tue, 12 May 2026 00:00:00 GMT Customer-Driven AI CTI Project Template :Part 2B: Reference Toolkit. From pure CTI to hands-on detection engineering with strict validation gates https://1200km.com/articles/read/2026/2026-05-11-customer-driven-ai-cti-project-template-part-1-foundations-745861507d03/ https://1200km.com/articles/read/2026/2026-05-11-customer-driven-ai-cti-project-template-part-1-foundations-745861507d03/ Mon, 11 May 2026 00:00:00 GMT Customer-Driven AI CTI Project Template. Part 1: Foundations. From pure CTI to hands-on detection engineering with strict validation gates https://1200km.com/articles/read/2026/2026-05-10-applying-sherman-kent-s-analytic-discipline-to-cti-a-practical-analyst-guide-33142ad7553b/ https://1200km.com/articles/read/2026/2026-05-10-applying-sherman-kent-s-analytic-discipline-to-cti-a-practical-analyst-guide-33142ad7553b/ Sun, 10 May 2026 00:00:00 GMT Applying Sherman Kent’s Analytic Discipline to CTI: A Practical Analyst Guide. Estimative language, evidence discipline, and analytic integrity for cyber. https://1200km.com/articles/read/2026/2026-05-09-cti-kill-chain-an-analyst-guide-with-real-world-evidence-c3bef6fd2979/ https://1200km.com/articles/read/2026/2026-05-09-cti-kill-chain-an-analyst-guide-with-real-world-evidence-c3bef6fd2979/ Sat, 09 May 2026 00:00:00 GMT CTI Kill Chain: An Analyst Guide With Real-World Evidence. Mapping adversary behavior from preparation to impact without overstating the evidence https://1200km.com/articles/read/2026/2026-05-09-cti-led-defensive-strategy-for-a-cellular-provider-case-study-c77bc5765b31/ https://1200km.com/articles/read/2026/2026-05-09-cti-led-defensive-strategy-for-a-cellular-provider-case-study-c77bc5765b31/ Sat, 09 May 2026 00:00:00 GMT CTI-Led Defensive Strategy for a Cellular Provider (Case Study). A full end-to-end practitioner guide for telecom core, cloud-native operations, SOC/NOC. https://1200km.com/articles/read/2026/2026-05-08-manual-cti-vs-ai-assisted-cti-a-step-by-step-clock-comparison-ee08325203fc/ https://1200km.com/articles/read/2026/2026-05-08-manual-cti-vs-ai-assisted-cti-a-step-by-step-clock-comparison-ee08325203fc/ Fri, 08 May 2026 00:00:00 GMT 2026-09-19T00:00:00Z Manual CTI vs. AI-Assisted CTI: A Step-by-Step Clock Comparison. Which steps compress, which do not, and what you risk if you do not understand the difference. https://1200km.com/articles/read/2026/2026-05-04-attack-playbook-operation-dragonrx-91339316f0df/ https://1200km.com/articles/read/2026/2026-05-04-attack-playbook-operation-dragonrx-91339316f0df/ Mon, 04 May 2026 00:00:00 GMT Attack Playbook — Operation DragonRx. Phase-by-Phase Attack Guide: Exact Commands Against the Deployed Lab https://1200km.com/articles/read/2026/2026-05-02-apt41-targeting-pharmaceutical-sector-log4shell-to-domain-compromise-9e4c1ba9dad6/ https://1200km.com/articles/read/2026/2026-05-02-apt41-targeting-pharmaceutical-sector-log4shell-to-domain-compromise-9e4c1ba9dad6/ Sat, 02 May 2026 00:00:00 GMT APT41 Targeting Pharmaceutical Sector: Log4Shell to Domain Compromise. Threat Intelligence Report | Operation DragonRx https://1200km.com/articles/read/2026/2026-05-02-lab-architecture-operation-dragonrx-38602f432e5c/ https://1200km.com/articles/read/2026/2026-05-02-lab-architecture-operation-dragonrx-38602f432e5c/ Sat, 02 May 2026 00:00:00 GMT Lab Architecture — Operation DragonRx. Part of the Operation DragonRx series · Overview · Lab Architecture · Attack Playbook · DFIR Walkthrough https://1200km.com/articles/read/2026/2026-04-29-ai-offensive-security-practical-attacks-against-llm-agents-516dbdabbf86/ https://1200km.com/articles/read/2026/2026-04-29-ai-offensive-security-practical-attacks-against-llm-agents-516dbdabbf86/ Wed, 29 Apr 2026 00:00:00 GMT AI Offensive Security: Practical Attacks Against LLM Agents. Red-Team and AppSec Practitioner Guide https://1200km.com/articles/read/2026/2026-04-28-vulnerable-ai-lab-3747e96314dd/ https://1200km.com/articles/read/2026/2026-04-28-vulnerable-ai-lab-3747e96314dd/ Tue, 28 Apr 2026 00:00:00 GMT Vulnerable AI Lab. Technical Guide for Usage, Attack Testing, Scenario Authoring, and Vulnerability Module Development https://1200km.com/articles/read/2026/2026-04-25-cti-research-kubernetes-and-cloud-native-threat-landscape-70373d6d7a87/ https://1200km.com/articles/read/2026/2026-04-25-cti-research-kubernetes-and-cloud-native-threat-landscape-70373d6d7a87/ Sat, 25 Apr 2026 00:00:00 GMT CTI Research: Kubernetes & Cloud-Native Threat Landscape. Technical Kill Chain Analysis, Detection Engineering, and Defensive Architecture (2023 — Q2 2026) https://1200km.com/articles/read/2026/2026-04-22-detecting-malicious-insider-activity-a-technical-detection-engineering-guide-3c3b41e95e82/ https://1200km.com/articles/read/2026/2026-04-22-detecting-malicious-insider-activity-a-technical-detection-engineering-guide-3c3b41e95e82/ Wed, 22 Apr 2026 00:00:00 GMT Detecting Malicious Insider Activity: A Technical Detection Engineering Guide. Detection logic, case evidence from 14 documented incidents, and a four-phase. https://1200km.com/articles/read/2026/2026-04-20-malicious-activity-as-a-statistical-signal-a-detection-engineering-analysis-of-anomaly-bas-90df8b6dea12/ https://1200km.com/articles/read/2026/2026-04-20-malicious-activity-as-a-statistical-signal-a-detection-engineering-analysis-of-anomaly-bas-90df8b6dea12/ Mon, 20 Apr 2026 00:00:00 GMT 2026-09-21T00:00:00Z Malicious Activity as a Statistical Signal: Anomaly Detection Engineering. Explore anomaly detection and multi-event correlation through real incidents, with. https://1200km.com/articles/read/2026/2026-04-18-what-ai-assisted-offensive-work-actually-means-for-your-detection-program-a-practitioner-s-9c27a8f40f12/ https://1200km.com/articles/read/2026/2026-04-18-what-ai-assisted-offensive-work-actually-means-for-your-detection-program-a-practitioner-s-9c27a8f40f12/ Sat, 18 Apr 2026 00:00:00 GMT What AI-Assisted Offensive Work Actually Means for Your Detection Program: A Practitioner’s…. What the public record supports, what it does not, and how to. https://1200km.com/articles/read/2026/2026-04-14-from-threat-intelligence-to-detection-a-practitioner-s-guide-2d930b168426/ https://1200km.com/articles/read/2026/2026-04-14-from-threat-intelligence-to-detection-a-practitioner-s-guide-2d930b168426/ Tue, 14 Apr 2026 00:00:00 GMT From Threat Intelligence to Detection: A Practitioner’s Guide. Building atomic, collection, correlational, TTP-based, and anomaly detection rules from real. https://1200km.com/articles/read/2026/2026-04-12-ai-in-offensive-operations-how-threat-actors-use-artificial-intelligence-4eaeeaf029a9/ https://1200km.com/articles/read/2026/2026-04-12-ai-in-offensive-operations-how-threat-actors-use-artificial-intelligence-4eaeeaf029a9/ Sun, 12 Apr 2026 00:00:00 GMT AI in Offensive Operations: How Threat Actors Use Artificial Intelligence. A CTI assessment of documented malicious and dual-use AI activity through April. https://1200km.com/articles/read/2026/2026-04-08-android-apk-vulnerability-research-complete-guide-a8fcae0f4849/ https://1200km.com/articles/read/2026/2026-04-08-android-apk-vulnerability-research-complete-guide-a8fcae0f4849/ Wed, 08 Apr 2026 00:00:00 GMT Android APK Vulnerability Research Complete Guide. Practical, end-to-end APK analysis for red teamers, bug hunters, and defenders. https://1200km.com/articles/read/2026/2026-04-08-deliberately-vulnerable-android-app-covering-every-owasp-mobile-top-10-class-7be775fc6415/ https://1200km.com/articles/read/2026/2026-04-08-deliberately-vulnerable-android-app-covering-every-owasp-mobile-top-10-class-7be775fc6415/ Wed, 08 Apr 2026 00:00:00 GMT Deliberately Vulnerable Android App Covering Every OWASP Mobile Top 10 Class. A hands-on reference for mobile security researchers, bug bounty hunters, and. https://1200km.com/articles/read/2026/2026-04-07-android-emulation-and-virtualisation-2f6b33fcc4aa/ https://1200km.com/articles/read/2026/2026-04-07-android-emulation-and-virtualisation-2f6b33fcc4aa/ Tue, 07 Apr 2026 00:00:00 GMT Android Emulation & Virtualisation. Complete Research Lab Guide. From Zero to a Fully Instrumented Android Research Environment https://1200km.com/articles/read/2026/2026-04-06-building-an-android-app-analysis-lab-on-ubuntu-a-practical-setup-guide-4a09fff37622/ https://1200km.com/articles/read/2026/2026-04-06-building-an-android-app-analysis-lab-on-ubuntu-a-practical-setup-guide-4a09fff37622/ Mon, 06 Apr 2026 00:00:00 GMT Building an Android App Analysis Lab on Ubuntu: A Practical Setup Guide. A practical step-by-step guide to building an Android malware analysis and security. https://1200km.com/articles/read/2026/2026-03-30-android-apk-analysis-tool-ai-powered-static-malware-analysis-in-your-terminal-4beb239dad12/ https://1200km.com/articles/read/2026/2026-03-30-android-apk-analysis-tool-ai-powered-static-malware-analysis-in-your-terminal-4beb239dad12/ Mon, 30 Mar 2026 00:00:00 GMT Android APK Analysis Tool: AI-Powered Static Malware Analysis in Your Terminal. A practical guide to analyzing Android applications with Claude, OpenAI. https://1200km.com/articles/read/2026/2026-03-30-android-malware-analysis-a-practical-guide-for-security-analysts-9cda5efb181d/ https://1200km.com/articles/read/2026/2026-03-30-android-malware-analysis-a-practical-guide-for-security-analysts-9cda5efb181d/ Mon, 30 Mar 2026 00:00:00 GMT Android Malware Analysis: A Practical Guide for Security Analysts. From APK unpacking to behavioral analysis — with three real-world malware case studies and. https://1200km.com/articles/read/2026/2026-03-24-cvss-v4-0-the-practical-field-guide-for-vulnerability-management-5b5a59728456/ https://1200km.com/articles/read/2026/2026-03-24-cvss-v4-0-the-practical-field-guide-for-vulnerability-management-5b5a59728456/ Tue, 24 Mar 2026 00:00:00 GMT CVSS v4.0: The Practical Field Guide for Vulnerability Management. From a number that nobody trusts to a tool that changes how you work https://1200km.com/articles/read/2026/2026-03-21-infrastructure-pivoting-how-cti-analysts-expand-from-a-single-ioc-to-a-full-attacker-netwo-1295d50ec29c/ https://1200km.com/articles/read/2026/2026-03-21-infrastructure-pivoting-how-cti-analysts-expand-from-a-single-ioc-to-a-full-attacker-netwo-1295d50ec29c/ Sat, 21 Mar 2026 00:00:00 GMT Infrastructure Pivoting: How CTI Analysts Expand From a Single IOC to a Full Attacker Network. The field manual for tracing attacker infrastructure — from. https://1200km.com/articles/read/2026/2026-03-20-attribution-methodology-how-to-build-defend-and-challenge-a-threat-actor-attribution-071066437ced/ https://1200km.com/articles/read/2026/2026-03-20-attribution-methodology-how-to-build-defend-and-challenge-a-threat-actor-attribution-071066437ced/ Fri, 20 Mar 2026 00:00:00 GMT Attribution Methodology: How to Build, Defend, and Challenge a Threat Actor Attribution. A practitioner’s guide for CTI analysts — from evidence collection. https://1200km.com/articles/read/2026/2026-03-19-att-and-ck-as-a-working-tool-theory-and-hands-on-practical-usage-d63835c9f101/ https://1200km.com/articles/read/2026/2026-03-19-att-and-ck-as-a-working-tool-theory-and-hands-on-practical-usage-d63835c9f101/ Thu, 19 Mar 2026 00:00:00 GMT ATT&CK as a Working Tool: Theory and Hands-On Practical Usage. A practitioner’s guide for CTI analysts, detection engineers, and threat hunters https://1200km.com/articles/read/2026/2026-03-16-navigate-my-blog-all-articles-by-topic-ffd800ef5480/ https://1200km.com/articles/read/2026/2026-03-16-navigate-my-blog-all-articles-by-topic-ffd800ef5480/ Mon, 16 Mar 2026 00:00:00 GMT Navigate My Blog: All Articles by Topic. A single entry point to 100+ articles on offensive security, AI-driven pentesting, red team, labs, and defense. Use. https://1200km.com/articles/read/2026/2026-03-14-ai-powered-malware-debugger-that-explains-every-function-it-sees-2a28ef75df8a/ https://1200km.com/articles/read/2026/2026-03-14-ai-powered-malware-debugger-that-explains-every-function-it-sees-2a28ef75df8a/ Sat, 14 Mar 2026 00:00:00 GMT AI-Powered Malware Debugger That Explains Every Function It Sees. How I combined Claude AI, Frida, Capstone, and a suite of static analysis engines into a. https://1200km.com/articles/read/2026/2026-03-14-stratusai-i-built-an-ai-powered-cloud-security-scanner-for-aws-and-gcp-here-s-everything-89c6702d3b84/ https://1200km.com/articles/read/2026/2026-03-14-stratusai-i-built-an-ai-powered-cloud-security-scanner-for-aws-and-gcp-here-s-everything-89c6702d3b84/ Sat, 14 Mar 2026 00:00:00 GMT StratusAI: I Built an AI-Powered Cloud Security Scanner for AWS and GCP — Here’s Everything. A complete engineering walkthrough of building, testing, and. https://1200km.com/articles/read/2026/2026-03-13-building-a-vulnerable-cloud-pentest-lab-with-terraform-9858ac96b29e/ https://1200km.com/articles/read/2026/2026-03-13-building-a-vulnerable-cloud-pentest-lab-with-terraform-9858ac96b29e/ Fri, 13 Mar 2026 00:00:00 GMT Building a Vulnerable Cloud Pentest Lab with Terraform. A complete, step-by-step guide to deploying intentionally misconfigured cloud resources for hands-on. https://1200km.com/articles/read/2026/2026-03-11-building-a-dockerized-ai-powered-host-vulnerability-assessment-tool-cd6e2147ce59/ https://1200km.com/articles/read/2026/2026-03-11-building-a-dockerized-ai-powered-host-vulnerability-assessment-tool-cd6e2147ce59/ Wed, 11 Mar 2026 00:00:00 GMT Building a Dockerized AI-Powered Host Vulnerability Assessment Tool. How I automated security auditing with Claude, Python, and Docker — and what it found on. https://1200km.com/articles/read/2026/2026-03-09-cti-research-muddywater-seedworm-mango-sandstorm-ebf6af5ba061/ https://1200km.com/articles/read/2026/2026-03-09-cti-research-muddywater-seedworm-mango-sandstorm-ebf6af5ba061/ Mon, 09 Mar 2026 00:00:00 GMT CTI Research: MuddyWater/Seedworm (Mango Sandstorm). Evidence-Labeled Threat Intelligence Assessment and SOC Defensive Guidance (2017 — March 2026) https://1200km.com/articles/read/2026/2026-03-07-cti-research-sandworm-apt44-649332e8af44/ https://1200km.com/articles/read/2026/2026-03-07-cti-research-sandworm-apt44-649332e8af44/ Sat, 07 Mar 2026 00:00:00 GMT CTI Research: Sandworm / APT44. Evidence-Labeled Threat Intelligence Assessment and SOC Defensive Guidance (2009 — March 2026) https://1200km.com/articles/read/2026/2026-03-06-cti-research-handala-hack-group-aka-handala-hack-team-ddbdd294cfb8/ https://1200km.com/articles/read/2026/2026-03-06-cti-research-handala-hack-group-aka-handala-hack-team-ddbdd294cfb8/ Fri, 06 Mar 2026 00:00:00 GMT CTI Research: Handala Hack Group (aka Handala Hack Team). Evidence-Labeled Threat Intelligence Assessment and SOC Defensive Guidance (December 2023 to March. https://1200km.com/articles/read/2026/2026-03-01-basic-static-malware-analysis-from-triage-to-unpacking-explained-and-automated-9442ef3b11b8/ https://1200km.com/articles/read/2026/2026-03-01-basic-static-malware-analysis-from-triage-to-unpacking-explained-and-automated-9442ef3b11b8/ Sun, 01 Mar 2026 00:00:00 GMT Basic Static Malware Analysis: From Triage to Unpacking — Explained and Automated. What static malware analysis is, why each step matters, and how to run the. https://1200km.com/articles/read/2026/2026-02-28-unpacker-a-practical-guide-to-modular-malware-packer-detection-and-unpacking-cf8ba924f25b/ https://1200km.com/articles/read/2026/2026-02-28-unpacker-a-practical-guide-to-modular-malware-packer-detection-and-unpacking-cf8ba924f25b/ Sat, 28 Feb 2026 00:00:00 GMT Unpacker: A Practical Guide to Modular Malware Packer Detection and Unpacking. Extract and validate unpacked PE/ELF samples with real examples — and prove it. https://1200km.com/articles/read/2026/2026-02-26-a-practical-guide-to-string-analyzer-extract-and-analyze-strings-from-binaries-without-the-875dc74e4868/ https://1200km.com/articles/read/2026/2026-02-26-a-practical-guide-to-string-analyzer-extract-and-analyze-strings-from-binaries-without-the-875dc74e4868/ Thu, 26 Feb 2026 00:00:00 GMT A Practical Guide to String Analyzer: Extract and Analyze Strings from Binaries (Without the…. Turn executables, memory dumps, and disk images into. https://1200km.com/articles/read/2026/2026-02-26-pe-import-analyzer-a-practical-guide-for-malware-analysts-and-reverse-engineers-29b8b98aeaf3/ https://1200km.com/articles/read/2026/2026-02-26-pe-import-analyzer-a-practical-guide-for-malware-analysts-and-reverse-engineers-29b8b98aeaf3/ Thu, 26 Feb 2026 00:00:00 GMT PE Import Analyzer: A Practical Guide for Malware Analysts and Reverse Engineers. How to quickly understand what a Windows executable does — before you run it. https://1200km.com/articles/read/2026/2026-02-21-one-tool-to-rule-them-all-file-metadata-and-static-analysis-for-malware-analysts-and-soc-t-c6dba1f5b7de/ https://1200km.com/articles/read/2026/2026-02-21-one-tool-to-rule-them-all-file-metadata-and-static-analysis-for-malware-analysts-and-soc-t-c6dba1f5b7de/ Sat, 21 Feb 2026 00:00:00 GMT One Tool to Rule Them All: File Metadata & Static Analysis for Malware Analysts and SOC Teams. Extract hashes, PE/ELF/Mach-O metadata, strings, YARA hits. https://1200km.com/articles/read/2026/2026-02-19-the-complete-guide-to-ai-driven-penetration-testing-cursor-mcp-and-the-modern-pt-workflow-8f27ff19f9ca/ https://1200km.com/articles/read/2026/2026-02-19-the-complete-guide-to-ai-driven-penetration-testing-cursor-mcp-and-the-modern-pt-workflow-8f27ff19f9ca/ Thu, 19 Feb 2026 00:00:00 GMT The Complete Guide to AI-Driven Penetration Testing: Cursor, MCP, and the Modern PT Workflow. A comprehensive, step-by-step guide to running penetration. https://1200km.com/articles/read/2026/2026-02-13-build-a-vulnerable-iis-sharepoint-lab-with-fluent-bit-complete-deployment-guide-8fe947e8439e/ https://1200km.com/articles/read/2026/2026-02-13-build-a-vulnerable-iis-sharepoint-lab-with-fluent-bit-complete-deployment-guide-8fe947e8439e/ Fri, 13 Feb 2026 00:00:00 GMT Build a Vulnerable IIS SharePoint Lab with Fluent Bit: Complete Deployment Guide. A full step-by-step guide with all scripts to deploy a vulnerable. https://1200km.com/articles/read/2026/2026-02-11-kubernetes-logging-and-monitoring-complete-guide-2ce9d4bdba80/ https://1200km.com/articles/read/2026/2026-02-11-kubernetes-logging-and-monitoring-complete-guide-2ce9d4bdba80/ Wed, 11 Feb 2026 00:00:00 GMT Kubernetes Logging and Monitoring: Complete Guide. A comprehensive reference for every major log type in Kubernetes: what it is, what you can monitor with. https://1200km.com/articles/read/2026/2026-02-09-gcp-penetration-testing-a-step-by-step-attack-guide-9e39bc3eb96d/ https://1200km.com/articles/read/2026/2026-02-09-gcp-penetration-testing-a-step-by-step-attack-guide-9e39bc3eb96d/ Mon, 09 Feb 2026 00:00:00 GMT GCP Penetration Testing: A Step-by-Step Attack Guide. A practical GCP lab case study: overprivileged identities, leaked creds, weak controls — and how it all. https://1200km.com/articles/read/2026/2026-02-06-welcome-to-the-new-era-when-a-teenager-can-crash-your-company-in-minutes-8818fb6c0503/ https://1200km.com/articles/read/2026/2026-02-06-welcome-to-the-new-era-when-a-teenager-can-crash-your-company-in-minutes-8818fb6c0503/ Fri, 06 Feb 2026 00:00:00 GMT Welcome to the New Era: When a Teenager Can Crash Your Company in Minutes. An Urgent Message for CISOs and C-Level Executives. The threat landscape has. https://1200km.com/articles/read/2026/2026-02-05-warning-i-just-built-real-malware-by-using-just-human-language-prompts-8949628dee19/ https://1200km.com/articles/read/2026/2026-02-05-warning-i-just-built-real-malware-by-using-just-human-language-prompts-8949628dee19/ Thu, 05 Feb 2026 00:00:00 GMT ⚠️ WARNING: I Just Built Real Malware by using just human language prompts!. A Complete Walkthrough: From “I Want to Build Malware” to Fully Functional. https://1200km.com/articles/read/2026/2026-02-04-my-lab-82d780962213/ https://1200km.com/articles/read/2026/2026-02-04-my-lab-82d780962213/ Wed, 04 Feb 2026 00:00:00 GMT My Lab: Building a Vulnerable Kubernetes Lab. Building a vulnerable Kubernetes lab https://1200km.com/articles/read/2026/2026-02-04-one-prompt-ai-powered-black-box-kubernetes-penetration-test-c75a4747960e/ https://1200km.com/articles/read/2026/2026-02-04-one-prompt-ai-powered-black-box-kubernetes-penetration-test-c75a4747960e/ Wed, 04 Feb 2026 00:00:00 GMT One-Prompt AI-Powered Black-Box Kubernetes Penetration Test. How Cursor + HexStrike MCP Automatically Discovers and Exploits Vulnerabilities. From single. https://1200km.com/articles/read/2026/2026-02-03-black-box-kubernetes-penetration-testing-playbook-56350b178af4/ https://1200km.com/articles/read/2026/2026-02-03-black-box-kubernetes-penetration-testing-playbook-56350b178af4/ Tue, 03 Feb 2026 00:00:00 GMT Black-Box Kubernetes Penetration Testing Playbook. A Manual, End-to-End Walkthrough from First Signal to Cluster Takeover https://1200km.com/articles/read/2026/2026-02-02-building-a-vulnerable-kubernetes-lab-a-complete-guide-to-25-critical-security-issues-fae4fc8e3a91/ https://1200km.com/articles/read/2026/2026-02-02-building-a-vulnerable-kubernetes-lab-a-complete-guide-to-25-critical-security-issues-fae4fc8e3a91/ Mon, 02 Feb 2026 00:00:00 GMT Building a Vulnerable Kubernetes Lab: A Complete Guide to 25 Critical Security Issues. Learn Kubernetes security by building a comprehensive penetration. https://1200km.com/articles/read/2026/2026-01-31-a-complete-cloud-penetration-testing-walkthrough-1914f687d7fd/ https://1200km.com/articles/read/2026/2026-01-31-a-complete-cloud-penetration-testing-walkthrough-1914f687d7fd/ Sat, 31 Jan 2026 00:00:00 GMT A Complete Cloud Penetration Testing Walkthrough. How I Discovered Critical Vulnerabilities in a Cloud Environment Using Basic Tools and Methodical Testing https://1200km.com/articles/read/2026/2026-01-31-ai-assisted-web-and-cloud-penetration-testing-with-cursor-mcp-hexstrike-and-burp-suite-mcp-01c02eed5258/ https://1200km.com/articles/read/2026/2026-01-31-ai-assisted-web-and-cloud-penetration-testing-with-cursor-mcp-hexstrike-and-burp-suite-mcp-01c02eed5258/ Sat, 31 Jan 2026 00:00:00 GMT AI-Assisted Web and Cloud Penetration Testing with Cursor + MCP HexStrike and Burp Suite MCP.. A Complete Guide to Modern AI-Powered Security Testing. From. https://1200km.com/articles/read/2026/2026-01-29-building-a-vulnerable-gcp-pentest-lab-with-terraform-9d1edfcd8eff/ https://1200km.com/articles/read/2026/2026-01-29-building-a-vulnerable-gcp-pentest-lab-with-terraform-9d1edfcd8eff/ Thu, 29 Jan 2026 00:00:00 GMT Building a Vulnerable GCP Pentest Lab with Terraform. A complete, step-by-step guide to deploying intentionally misconfigured cloud resources for hands-on. https://1200km.com/articles/read/2026/2026-01-29-cursor-hexstrike-fully-automated-adcs-esc8-attack-8736fec53c58/ https://1200km.com/articles/read/2026/2026-01-29-cursor-hexstrike-fully-automated-adcs-esc8-attack-8736fec53c58/ Thu, 29 Jan 2026 00:00:00 GMT Cursor + Hexstrike. Fully Automated ADCS ESC8 Attack. One-Prompt Domain Compromise https://1200km.com/articles/read/2026/2026-01-28-adcs-esc8-attack-certificate-based-domain-compromise-complete-guide-7ec76562fa6d/ https://1200km.com/articles/read/2026/2026-01-28-adcs-esc8-attack-certificate-based-domain-compromise-complete-guide-7ec76562fa6d/ Wed, 28 Jan 2026 00:00:00 GMT ADCS ESC8 Attack: Certificate-Based Domain Compromise — Complete Guide. Abstract https://1200km.com/articles/read/2026/2026-01-27-ai-driven-black-box-active-directory-penetration-testing-8de0b9ad38b7/ https://1200km.com/articles/read/2026/2026-01-27-ai-driven-black-box-active-directory-penetration-testing-8de0b9ad38b7/ Tue, 27 Jan 2026 00:00:00 GMT AI-Driven Black Box Active Directory Penetration Testing. Fully Automated AD Discovery and Exploitation with Cursor AI and HexStrike-ai MCP. From IP to Full. https://1200km.com/articles/read/2026/2026-01-26-active-directory-penetration-testing-745cfb31d7d3/ https://1200km.com/articles/read/2026/2026-01-26-active-directory-penetration-testing-745cfb31d7d3/ Mon, 26 Jan 2026 00:00:00 GMT Active Directory Penetration Testing. A Deep Dive into GOAD-Mini Lab Assessment. Step-by-step guide. https://1200km.com/articles/read/2026/2026-01-24-active-directory-lab-for-pentest-manual-deployment-guide-cab28cd4ad8d/ https://1200km.com/articles/read/2026/2026-01-24-active-directory-lab-for-pentest-manual-deployment-guide-cab28cd4ad8d/ Sat, 24 Jan 2026 00:00:00 GMT Active Directory Lab for PenTest. Manual Deployment Guide. This guide is a manual, step-by-step deployment of a GOAD-Mini Active Directory environment on. https://1200km.com/articles/read/2026/2026-01-23-deploy-a-complete-active-directory-pentest-lab-in-one-prompt-with-cursor-ai-ff926fd2b3fc/ https://1200km.com/articles/read/2026/2026-01-23-deploy-a-complete-active-directory-pentest-lab-in-one-prompt-with-cursor-ai-ff926fd2b3fc/ Fri, 23 Jan 2026 00:00:00 GMT Deploy a Complete Active Directory PenTest Lab in One Prompt with Cursor AI. How I automated the deployment of a complex AD lab environment using AI assistance https://1200km.com/articles/read/2026/2026-01-19-the-ai-revolution-in-offensive-security-31e44704d51a/ https://1200km.com/articles/read/2026/2026-01-19-the-ai-revolution-in-offensive-security-31e44704d51a/ Mon, 19 Jan 2026 00:00:00 GMT The AI Revolution in Offensive Security. Practical Hands-On Guide to AI-Accelerated Offensive Security: Burp Suite, Nmap, OSINT, Exploitation, and End-to-End. https://1200km.com/articles/read/2026/2026-01-17-the-one-prompt-pt-lab-autonomous-android-security-research-with-cursor-ai-b96ed2053071/ https://1200km.com/articles/read/2026/2026-01-17-the-one-prompt-pt-lab-autonomous-android-security-research-with-cursor-ai-b96ed2053071/ Sat, 17 Jan 2026 00:00:00 GMT The One-Prompt PT Lab: Autonomous Android Security Research with Cursor AI. From Bare Directory to Full Exploitation: A Case Study on OWASP UnCrackable L1 https://1200km.com/articles/read/2026/2026-01-16-hacker-tool-development-workflow-android-rubber-ducky-payloads-in-cursor-ai-47fcccb9c845/ https://1200km.com/articles/read/2026/2026-01-16-hacker-tool-development-workflow-android-rubber-ducky-payloads-in-cursor-ai-47fcccb9c845/ Fri, 16 Jan 2026 00:00:00 GMT Hacker Tool Development Workflow: Android Rubber Ducky Payloads in Cursor AI. From plain-English prompts to reliable HID flows — validated with emulator. https://1200km.com/articles/read/2026/2026-01-15-building-a-usb-rubber-ducky-with-arduino-leonardo-with-cursor-a23dd64d1bbe/ https://1200km.com/articles/read/2026/2026-01-15-building-a-usb-rubber-ducky-with-arduino-leonardo-with-cursor-a23dd64d1bbe/ Thu, 15 Jan 2026 00:00:00 GMT Building a USB Rubber Ducky with Arduino Leonardo with Cursor.. Integrating Cursor AI into your hardware hacking workflow is a game-changer. From Human. https://1200km.com/articles/read/2026/2026-01-11-hexstrike-cursor-for-osint-from-one-email-to-a-full-exposure-map-ffdfc7ba1b30/ https://1200km.com/articles/read/2026/2026-01-11-hexstrike-cursor-for-osint-from-one-email-to-a-full-exposure-map-ffdfc7ba1b30/ Sun, 11 Jan 2026 00:00:00 GMT HexStrike + Cursor for OSINT: From One Email to a Full Exposure Map. Why OSINT is harder than “hack the box,” what an AI-assisted workflow looks like in. https://1200km.com/articles/read/2026/2026-01-08-hexstrike-cursor-mcp-from-single-target-full-subnet-compromise-lab-pt-walkthrough-f2e1fd793ad7/ https://1200km.com/articles/read/2026/2026-01-08-hexstrike-cursor-mcp-from-single-target-full-subnet-compromise-lab-pt-walkthrough-f2e1fd793ad7/ Thu, 08 Jan 2026 00:00:00 GMT HexStrike + Cursor (MCP): From Single Target → Full Subnet Compromise (Lab PT Walkthrough). A real end-to-end lab engagement: recon → credential discovery →. https://1200km.com/articles/read/2026/2026-01-06-building-an-extremely-vulnerable-ubuntu-24-04-server-lab-bonus-full-pt-with-hexstrike-90034032775b/ https://1200km.com/articles/read/2026/2026-01-06-building-an-extremely-vulnerable-ubuntu-24-04-server-lab-bonus-full-pt-with-hexstrike-90034032775b/ Tue, 06 Jan 2026 00:00:00 GMT Building an Extremely Vulnerable Ubuntu 24.04 Server Lab (Bonus: Full PT with Hexstrike). A Step-by-Step Guide: Hands-on guide to creating an intentionally. https://1200km.com/articles/read/2026/2026-01-05-building-an-extremely-vulnerable-windows-10-lab-a-step-by-step-guide-bonus-full-pt-with-9290d388744c/ https://1200km.com/articles/read/2026/2026-01-05-building-an-extremely-vulnerable-windows-10-lab-a-step-by-step-guide-bonus-full-pt-with-9290d388744c/ Mon, 05 Jan 2026 00:00:00 GMT Building an Extremely Vulnerable Windows 10 Lab: A Step-by-Step Guide (Bonus :Full PT with…. Hands-on guide to creating an intentionally insecure Windows 10. https://1200km.com/articles/read/2026/2026-01-05-hexstrike-gemini-ai-assisted-smb-exposure-credential-brute-force-2c5f99dcdbf4/ https://1200km.com/articles/read/2026/2026-01-05-hexstrike-gemini-ai-assisted-smb-exposure-credential-brute-force-2c5f99dcdbf4/ Mon, 05 Jan 2026 00:00:00 GMT HexStrike + Gemini. AI-Assisted SMB Exposure Credential Brute-Force. From Toolchain Failures → Service Fingerprinting → Authentication Findings → Share Risk https://1200km.com/articles/read/2026/2026-01-04-hexstrike-gemini-ai-assisted-ssh-credential-brute-force-a9162f8e253b/ https://1200km.com/articles/read/2026/2026-01-04-hexstrike-gemini-ai-assisted-ssh-credential-brute-force-a9162f8e253b/ Sun, 04 Jan 2026 00:00:00 GMT HexStrike + Gemini. AI-Assisted SSH Credential Brute-Force. From Service Validation → Dependency Fixes → Findings → Defensive Takeaways https://1200km.com/articles/read/2026/2026-01-03-hexstrike-openai-codex-ai-driven-exploitation-of-metasploitable-b892c07be39f/ https://1200km.com/articles/read/2026/2026-01-03-hexstrike-openai-codex-ai-driven-exploitation-of-metasploitable-b892c07be39f/ Sat, 03 Jan 2026 00:00:00 GMT HexStrike+OpenAI Codex. AI-Driven Exploitation of Metasploitable.. How I Used an LLM-Orchestrated Toolchain to Enumerate and Exploit a Deliberately. https://1200km.com/articles/read/2026/2026-01-02-burp-suite-mcp-gemini-cli-c1229edfe092/ https://1200km.com/articles/read/2026/2026-01-02-burp-suite-mcp-gemini-cli-c1229edfe092/ Fri, 02 Jan 2026 00:00:00 GMT Burp Suite MCP + Gemini CLI. Connect Burp Suite to Gemini CLI using Model Context Protocol (MCP) and Turn Burp into an AI-callable toolset and accelerate. https://1200km.com/articles/read/2025/2025-12-31-hexstrike-mcp-orchestration-with-ollama-ubuntu-host-kali-vm-ssh-bridging-and-performance-f049ab140596/ https://1200km.com/articles/read/2025/2025-12-31-hexstrike-mcp-orchestration-with-ollama-ubuntu-host-kali-vm-ssh-bridging-and-performance-f049ab140596/ Wed, 31 Dec 2025 00:00:00 GMT HexStrike MCP Orchestration with Ollama: Ubuntu Host, Kali VM, SSH Bridging, and Performance…. How to wire Ubuntu (Ollama) to Kali (HexStrike) with MCP over. https://1200km.com/articles/read/2025/2025-12-29-ai-driven-office-documents-password-recovery-with-hexstrike-ai-and-gemini-cli-3c8bb7deb82d/ https://1200km.com/articles/read/2025/2025-12-29-ai-driven-office-documents-password-recovery-with-hexstrike-ai-and-gemini-cli-3c8bb7deb82d/ Mon, 29 Dec 2025 00:00:00 GMT AI-Driven Office Documents Password Recovery with HexStrike-AI and Gemini-CLI. From Encrypted Document to Readable Content Using LLM-Orchestrated Tooling https://1200km.com/articles/read/2025/2025-12-29-ai-driven-pdf-password-recovery-with-hexstrike-ai-and-gemini-cli-cfa7eb0fae91/ https://1200km.com/articles/read/2025/2025-12-29-ai-driven-pdf-password-recovery-with-hexstrike-ai-and-gemini-cli-cfa7eb0fae91/ Mon, 29 Dec 2025 00:00:00 GMT AI-Driven PDF Password Recovery with HexStrike-AI and Gemini-CLI. From Encrypted Document to Readable Content Using LLM-Orchestrated Tooling https://1200km.com/articles/read/2025/2025-12-26-hexstrike-gemini-vs-hackerai-ops-copilot-vs-chatbot-with-tools-1d799845410b/ https://1200km.com/articles/read/2025/2025-12-26-hexstrike-gemini-vs-hackerai-ops-copilot-vs-chatbot-with-tools-1d799845410b/ Fri, 26 Dec 2025 00:00:00 GMT HexStrike + Gemini vs. HackerAI: “Ops Copilot” vs. “Chatbot with Tools”. A practical lab comparison: Why orchestration quality beats raw model IQ in. https://1200km.com/articles/read/2025/2025-12-25-ai-driven-zip-password-recovery-with-hexstrike-ai-and-gemini-cli-b8fc5c475ebc/ https://1200km.com/articles/read/2025/2025-12-25-ai-driven-zip-password-recovery-with-hexstrike-ai-and-gemini-cli-b8fc5c475ebc/ Thu, 25 Dec 2025 00:00:00 GMT AI-Driven ZIP Password Recovery with HexStrike-AI and Gemini-CLI. From Encrypted Archive to Flag Using LLM-Orchestrated Tooling https://1200km.com/articles/read/2025/2025-12-25-hexstrike-ai-a-force-multiplier-for-red-teams-and-a-dangerous-shift-in-the-threat-landscap-3e1d4e86f3ae/ https://1200km.com/articles/read/2025/2025-12-25-hexstrike-ai-a-force-multiplier-for-red-teams-and-a-dangerous-shift-in-the-threat-landscap-3e1d4e86f3ae/ Thu, 25 Dec 2025 00:00:00 GMT HexStrike-AI: A Force Multiplier for Red Teams — and a Dangerous Shift in the Threat Landscape. Why AI-Orchestrated Pentesting Is a Force Multiplier for Red. https://1200km.com/articles/read/2025/2025-12-24-ai-driven-wireless-penetration-testing-one-promt-wifi-cracking-6477c06f6af4/ https://1200km.com/articles/read/2025/2025-12-24-ai-driven-wireless-penetration-testing-one-promt-wifi-cracking-6477c06f6af4/ Wed, 24 Dec 2025 00:00:00 GMT AI-Driven Wireless Penetration Testing. One-Prompt Wi-Fi Cracking. Using Aircrack-ng with HexStrike-AI and Gemini-CLI https://1200km.com/articles/read/2025/2025-12-23-integrating-shodan-with-hexstrike-ai-using-gemini-cli-b6f9fcbe8e6e/ https://1200km.com/articles/read/2025/2025-12-23-integrating-shodan-with-hexstrike-ai-using-gemini-cli-b6f9fcbe8e6e/ Tue, 23 Dec 2025 00:00:00 GMT Integrating Shodan with HexStrike-AI Using Gemini-CLI. A Practical Guide to AI-Driven External Reconnaissance and Vulnerability Analysis https://1200km.com/articles/read/2025/2025-12-22-ai-driven-web-application-pentesting-with-hexstrike-ai-67f3dae32040/ https://1200km.com/articles/read/2025/2025-12-22-ai-driven-web-application-pentesting-with-hexstrike-ai-67f3dae32040/ Mon, 22 Dec 2025 00:00:00 GMT AI-Driven Web Application Pentesting with HexStrike-AI. A Practical, End-to-End Guide to Modern Web Application Penetration Testing Using LLM-Orchestrated. https://1200km.com/articles/read/2025/2025-12-21-ai-driven-pentesting-at-home-using-hexstrike-ai-for-full-network-discovery-and-exploitatio-00a9e88b3bde/ https://1200km.com/articles/read/2025/2025-12-21-ai-driven-pentesting-at-home-using-hexstrike-ai-for-full-network-discovery-and-exploitatio-00a9e88b3bde/ Sun, 21 Dec 2025 00:00:00 GMT AI-Driven Pentesting at Home: Using HexStrike-AI for Full Network Discovery and Exploitation. How I Used Gemini + HexStrike-AI on Kali Linux to Scan. https://1200km.com/articles/read/2025/2025-12-18-hexstrike-ai-install-configure-and-run-mcp-with-gemini-openai-cursor-llama-85a0e5752949/ https://1200km.com/articles/read/2025/2025-12-18-hexstrike-ai-install-configure-and-run-mcp-with-gemini-openai-cursor-llama-85a0e5752949/ Thu, 18 Dec 2025 00:00:00 GMT HexStrike AI: Install, Configure, and Run MCP with Gemini, OpenAI, Cursor, Llama. A practical, end-to-end guide to installing HexStrike AI, wiring it as an. https://1200km.com/articles/read/2025/2025-12-14-endpoint-threat-hunting-proactive-detection-on-windows-linux-and-macos-f892d9b8a113/ https://1200km.com/articles/read/2025/2025-12-14-endpoint-threat-hunting-proactive-detection-on-windows-linux-and-macos-f892d9b8a113/ Sun, 14 Dec 2025 00:00:00 GMT Endpoint Threat Hunting: Proactive Detection on Windows, Linux, and macOS. Uncovering Advanced Compromises Through Telemetry, Artifacts, MITRE ATT&CK. https://1200km.com/articles/read/2025/2025-12-12-protocol-level-network-threat-hunting-a-wireshark-centric-guide-a6770ffc96c6/ https://1200km.com/articles/read/2025/2025-12-12-protocol-level-network-threat-hunting-a-wireshark-centric-guide-a6770ffc96c6/ Fri, 12 Dec 2025 00:00:00 GMT 2026-09-19T00:00:00Z Protocol-Level Network Threat Hunting: A Wireshark-Centric Guide. Uncovering Stealthy Attacks Through IOCs, Anomaly Detection, and Practical Playbooks https://1200km.com/articles/read/2025/2025-12-02-correlation-based-detection-rules-in-cybersecurity-from-atomic-events-to-behavioral-insigh-1b3df31597bb/ https://1200km.com/articles/read/2025/2025-12-02-correlation-based-detection-rules-in-cybersecurity-from-atomic-events-to-behavioral-insigh-1b3df31597bb/ Tue, 02 Dec 2025 00:00:00 GMT Correlation-Based Detection Rules in Cybersecurity: From Atomic Events to Behavioral Insight. A comprehensive exploration of multi-event analytics, temporal. https://1200km.com/articles/read/2025/2025-12-01-single-event-detection-rules-in-cybersecurity-aa7498f665bd/ https://1200km.com/articles/read/2025/2025-12-01-single-event-detection-rules-in-cybersecurity-aa7498f665bd/ Mon, 01 Dec 2025 00:00:00 GMT Single-Event Detection Rules in Cybersecurity. Introduction https://1200km.com/articles/read/2025/2025-11-26-enhancing-penetration-testing-with-hackerai-step-by-step-guide-metasploitable-lab-b2ab2cdd4139/ https://1200km.com/articles/read/2025/2025-11-26-enhancing-penetration-testing-with-hackerai-step-by-step-guide-metasploitable-lab-b2ab2cdd4139/ Wed, 26 Nov 2025 00:00:00 GMT Enhancing Penetration Testing with HackerAI: Step-by-Step Guide (Metasploitable Lab). Learn how to integrate AI into every phase of the penetration testing. https://1200km.com/articles/read/2025/2025-11-25-getting-more-from-burp-suite-with-llms-fdd03cec343d/ https://1200km.com/articles/read/2025/2025-11-25-getting-more-from-burp-suite-with-llms-fdd03cec343d/ Tue, 25 Nov 2025 00:00:00 GMT Getting More from Burp Suite with LLMs. How ChatGPT Accelerates Scan Analysis, Prioritization and Mitigation. Practical workflow and prompt recipes for. https://1200km.com/articles/read/2025/2025-11-24-reinventing-recon-nmap-meets-chatgpt-e2acb6130be5/ https://1200km.com/articles/read/2025/2025-11-24-reinventing-recon-nmap-meets-chatgpt-e2acb6130be5/ Mon, 24 Nov 2025 00:00:00 GMT Reinventing Recon: Nmap Meets ChatGPT. How I leveled up penetration tests by pairing classic tools (NMAP) with LLMs like ChatGPT. https://1200km.com/articles/read/2025/2025-11-23-spiderfoot-deep-dive-installation-scans-and-practical-use-cases-11ea6537ad6f/ https://1200km.com/articles/read/2025/2025-11-23-spiderfoot-deep-dive-installation-scans-and-practical-use-cases-11ea6537ad6f/ Sun, 23 Nov 2025 00:00:00 GMT SpiderFoot Deep Dive: Installation, Scans, and Practical Use Cases. How to run SpiderFoot, pick the right modules, interpret results, and use it responsibly. https://1200km.com/articles/read/2025/2025-11-07-cloud-native-security-threats-attacks-and-detection-strategies-55b3dd6ea2d1/ https://1200km.com/articles/read/2025/2025-11-07-cloud-native-security-threats-attacks-and-detection-strategies-55b3dd6ea2d1/ Fri, 07 Nov 2025 00:00:00 GMT Cloud-Native Security Threats, Attacks, and Detection Strategies. Securing Cloud‑Native Environments — A Comprehensive Guide to Kubernetes Threats, Detection. https://1200km.com/articles/read/2025/2025-11-02-deploying-fluent-bit-as-a-windows-service-for-centralized-log-forwarding-baec55b8aaf8/ https://1200km.com/articles/read/2025/2025-11-02-deploying-fluent-bit-as-a-windows-service-for-centralized-log-forwarding-baec55b8aaf8/ Sun, 02 Nov 2025 00:00:00 GMT Deploying Fluent Bit as a Windows Service for Centralized Log Forwarding. A step-by-step guide to collecting Windows Event Logs and securely shipping them to. https://1200km.com/articles/read/2025/2025-11-01-the-atomic-standard-a-practitioner-s-compendium-for-single-event-threat-detection-570c4241d4d9/ https://1200km.com/articles/read/2025/2025-11-01-the-atomic-standard-a-practitioner-s-compendium-for-single-event-threat-detection-570c4241d4d9/ Sat, 01 Nov 2025 00:00:00 GMT The Atomic Standard: A Practitioner’s Compendium for Single-Event Threat Detection. Part 1: The Theoretical Foundation of Atomic Detection https://1200km.com/articles/read/2025/2025-10-20-meet-syscheck-beauty-a-colorful-linux-system-report-with-deep-storage-insights-and-exporta-a38329dfe085/ https://1200km.com/articles/read/2025/2025-10-20-meet-syscheck-beauty-a-colorful-linux-system-report-with-deep-storage-insights-and-exporta-a38329dfe085/ Mon, 20 Oct 2025 00:00:00 GMT Meet syscheck_beauty: a colorful Linux system report with deep storage insights (and exportable…. TL;DR: I built a single-file Python tool that prints a. https://1200km.com/articles/read/2025/2025-10-19-augmenting-digital-forensics-with-ai-how-chatgpt-transforms-investigation-workflows-34eb10887ea5/ https://1200km.com/articles/read/2025/2025-10-19-augmenting-digital-forensics-with-ai-how-chatgpt-transforms-investigation-workflows-34eb10887ea5/ Sun, 19 Oct 2025 00:00:00 GMT Augmenting Digital Forensics with AI: How ChatGPT Transforms Investigation Workflows. From evidence triage to report generation — applying large language. https://1200km.com/articles/read/2025/2025-10-18-automating-a-safe-dvwa-lab-with-ansible-build-a-reproducible-vulnerable-environment-for-tr-026d74697c4a/ https://1200km.com/articles/read/2025/2025-10-18-automating-a-safe-dvwa-lab-with-ansible-build-a-reproducible-vulnerable-environment-for-tr-026d74697c4a/ Sat, 18 Oct 2025 00:00:00 GMT Automating a Safe DVWA Lab with Ansible: Build a Reproducible Vulnerable Environment for Training…. How to deploy Damn Vulnerable Web App in minutes inside. https://1200km.com/articles/read/2025/2025-10-14-the-invisible-pipeline-defending-ci-cd-from-targeted-attacks-456283ee5ed3/ https://1200km.com/articles/read/2025/2025-10-14-the-invisible-pipeline-defending-ci-cd-from-targeted-attacks-456283ee5ed3/ Tue, 14 Oct 2025 00:00:00 GMT The Invisible Pipeline: Defending CI/CD from Targeted Attacks. How adversaries weaponize build systems — and the concrete tools & controls you can use to. https://1200km.com/articles/read/2025/2025-10-13-villager-the-ai-powered-penetration-testing-framework-8df10532e265/ https://1200km.com/articles/read/2025/2025-10-13-villager-the-ai-powered-penetration-testing-framework-8df10532e265/ Mon, 13 Oct 2025 00:00:00 GMT Villager: The AI-Powered Penetration Testing Framework. How “Villager,” a DeepSeek-driven framework from China’s Cyberspike collective, automates. https://1200km.com/articles/read/2025/2025-08-31-from-bugs-to-breaches-learning-secure-coding-through-the-owasp-top-10-21b425fafb83/ https://1200km.com/articles/read/2025/2025-08-31-from-bugs-to-breaches-learning-secure-coding-through-the-owasp-top-10-21b425fafb83/ Sun, 31 Aug 2025 00:00:00 GMT From Bugs to Breaches: Learning Secure Coding Through the OWASP Top 10. Practical scenarios that show how small developer mistakes lead to big security. https://1200km.com/articles/read/2025/2025-08-01-the-20x-employee-a-strategic-framework-for-unlocking-hyper-productivity-with-artificial-8f49cde95a25/ https://1200km.com/articles/read/2025/2025-08-01-the-20x-employee-a-strategic-framework-for-unlocking-hyper-productivity-with-artificial-8f49cde95a25/ Fri, 01 Aug 2025 00:00:00 GMT The 20x Employee: A Strategic Framework for Unlocking Hyper-Productivity with Artificial…. A Strategic Blueprint for Augmenting Human Talent with Generative. https://1200km.com/articles/read/2025/2025-07-27-quick-start-server-hardening-checklist-all-open-source-08e9887b9faa/ https://1200km.com/articles/read/2025/2025-07-27-quick-start-server-hardening-checklist-all-open-source-08e9887b9faa/ Sun, 27 Jul 2025 00:00:00 GMT Quick‑Start Server Hardening Checklist (all open‑source). ISO 27001-Based Server Hardening Plan https://1200km.com/articles/read/2025/2025-07-25-information-security-awareness-principles-and-best-practices-for-employees-6e518eda752c/ https://1200km.com/articles/read/2025/2025-07-25-information-security-awareness-principles-and-best-practices-for-employees-6e518eda752c/ Fri, 25 Jul 2025 00:00:00 GMT Information Security Awareness: Principles and Best Practices for Employees. What Is Information Security and Why Does It Matter https://1200km.com/articles/read/2025/2025-07-25-phishing-email-awareness-protecting-employees-and-organizations-cf5bc57a0511/ https://1200km.com/articles/read/2025/2025-07-25-phishing-email-awareness-protecting-employees-and-organizations-cf5bc57a0511/ Fri, 25 Jul 2025 00:00:00 GMT Phishing Email Awareness: Protecting Employees and Organizations. What is Email Phishing and Why It’s Dangerous https://1200km.com/articles/read/2025/2025-07-20-cyberattacks-on-4g-lte-telecom-networks-threat-mapping-and-defense-bd0e7fe76f54/ https://1200km.com/articles/read/2025/2025-07-20-cyberattacks-on-4g-lte-telecom-networks-threat-mapping-and-defense-bd0e7fe76f54/ Sun, 20 Jul 2025 00:00:00 GMT Cyberattacks on 4G/LTE Telecom Networks: Threat Mapping and Defense. This research provides an in-depth analysis of cyber threats targeting LTE telecom core. https://1200km.com/articles/read/2025/2025-07-20-cyberattacks-on-5g-telecom-networks-threat-mapping-and-defense-aa74f680a7df/ https://1200km.com/articles/read/2025/2025-07-20-cyberattacks-on-5g-telecom-networks-threat-mapping-and-defense-aa74f680a7df/ Sun, 20 Jul 2025 00:00:00 GMT Cyberattacks on 5G Telecom Networks: Threat Mapping and Defense. This research provides an in-depth analysis of cyber threats targeting 5G telecom core. https://1200km.com/articles/read/2025/2025-07-11-fluentbit-on-kubernetes-demonset-deployment-13c3915113ba/ https://1200km.com/articles/read/2025/2025-07-11-fluentbit-on-kubernetes-demonset-deployment-13c3915113ba/ Fri, 11 Jul 2025 00:00:00 GMT FluentBit on Kubernetes DemonSet Deployment.. Cluster-wide log collection using Fluent Bit on every node https://1200km.com/articles/read/2025/2025-07-11-sending-eks-control-plane-logs-via-aws-lambda-c4ce0cf84c5b/ https://1200km.com/articles/read/2025/2025-07-11-sending-eks-control-plane-logs-via-aws-lambda-c4ce0cf84c5b/ Fri, 11 Jul 2025 00:00:00 GMT Sending EKS Control Plane Logs via AWS Lambda. A step-by-step guide to forwarding Amazon EKS control plane logs to SIEM/LogCOllector/XPLG using a lightweight. https://1200km.com/articles/read/2025/2025-07-09-threat-hunting-with-the-pyramid-of-pain-8add3cedb380/ https://1200km.com/articles/read/2025/2025-07-09-threat-hunting-with-the-pyramid-of-pain-8add3cedb380/ Wed, 09 Jul 2025 00:00:00 GMT Threat Hunting with the Pyramid of Pain. A practical guide to using threat indicators that actually hurt your attackers, based on David J. Bianco’s model.. https://1200km.com/articles/read/2025/2025-07-08-fluent-bit-on-aws-eks-centralized-kubernetes-log-shipping-to-xplg-78811b8db55f/ https://1200km.com/articles/read/2025/2025-07-08-fluent-bit-on-aws-eks-centralized-kubernetes-log-shipping-to-xplg-78811b8db55f/ Tue, 08 Jul 2025 00:00:00 GMT Fluent Bit on AWS-EKS: Centralized Kubernetes Log Shipping to XPLG. Deploy Fluent Bit as a DaemonSet with full metadata enrichment, RBAC, and HTTP output to. https://1200km.com/articles/read/2025/2025-06-17-tools-by-mitre-att-and-ck-guide-77c4d947ba36/ https://1200km.com/articles/read/2025/2025-06-17-tools-by-mitre-att-and-ck-guide-77c4d947ba36/ Tue, 17 Jun 2025 00:00:00 GMT Tools by MITRE ATT&CK Guide. Reconnaissance https://1200km.com/articles/read/2025/2025-04-17-deep-dive-automating-static-malware-analysis-with-three-python-tools-46a26c0a7f87/ https://1200km.com/articles/read/2025/2025-04-17-deep-dive-automating-static-malware-analysis-with-three-python-tools-46a26c0a7f87/ Thu, 17 Apr 2025 00:00:00 GMT Deep Dive: Automating Static Malware Analysis with Three Python Tools. Static malware analysis involves multiple stages, each revealing different facets of a. https://1200km.com/articles/read/2025/2025-04-01-static-malware-analysis-file-fingerprinting-3ddf9bdd7864/ https://1200km.com/articles/read/2025/2025-04-01-static-malware-analysis-file-fingerprinting-3ddf9bdd7864/ Tue, 01 Apr 2025 00:00:00 GMT Static Malware Analysis. File Fingerprinting. Understanding File Signatures, Hash, Digital Signatures https://1200km.com/articles/read/2025/2025-03-30-static-malware-analysis-obfuscation-51de3992065d/ https://1200km.com/articles/read/2025/2025-03-30-static-malware-analysis-obfuscation-51de3992065d/ Sun, 30 Mar 2025 00:00:00 GMT Static Malware Analysis: Obfuscation. Understanding Code Obfuscation in Malware https://1200km.com/articles/read/2025/2025-03-29-static-malware-analysis-strings-analysis-e876640cfdb0/ https://1200km.com/articles/read/2025/2025-03-29-static-malware-analysis-strings-analysis-e876640cfdb0/ Sat, 29 Mar 2025 00:00:00 GMT Static Malware Analysis: Strings Analysis. Understanding Strings https://1200km.com/articles/read/2025/2025-03-24-spw-aw25-po-010-sms-exe-exe-agenttesla-767fbc920295/ https://1200km.com/articles/read/2025/2025-03-24-spw-aw25-po-010-sms-exe-exe-agenttesla-767fbc920295/ Mon, 24 Mar 2025 00:00:00 GMT SPW AW25 — PO.010 SMS.exe.exe (AgentTesla). Malware research report https://1200km.com/articles/read/2025/2025-03-14-authenticator-exe-dearsteeler-0c1d69767939/ https://1200km.com/articles/read/2025/2025-03-14-authenticator-exe-dearsteeler-0c1d69767939/ Fri, 14 Mar 2025 00:00:00 GMT Authenticator.exe/DearSteeler. Malware research report https://1200km.com/articles/read/2025/2025-02-24-soc-tier-1-the-complete-onboarding-guide-to-security-monitoring-and-incident-response-824a1dfe4476/ https://1200km.com/articles/read/2025/2025-02-24-soc-tier-1-the-complete-onboarding-guide-to-security-monitoring-and-incident-response-824a1dfe4476/ Mon, 24 Feb 2025 00:00:00 GMT SOC Tier 1: The Complete Onboarding Guide to Security Monitoring and Incident Response. Part 1. https://1200km.com/articles/read/2024/2024-11-24-title-metasploit-modules-guide-exploit-73eecb50e3c3/ https://1200km.com/articles/read/2024/2024-11-24-title-metasploit-modules-guide-exploit-73eecb50e3c3/ Sun, 24 Nov 2024 00:00:00 GMT Metasploit Modules Guide: Exploit. Complete Explanation of Exploit Mode in Metasploit https://1200km.com/articles/read/2024/2024-11-20-how-to-create-a-vulnerable-windows-virtual-machine-for-pentesting-training-with-scripts-6dc39f0b3bb3/ https://1200km.com/articles/read/2024/2024-11-20-how-to-create-a-vulnerable-windows-virtual-machine-for-pentesting-training-with-scripts-6dc39f0b3bb3/ Wed, 20 Nov 2024 00:00:00 GMT How to Create a Vulnerable Windows Virtual Machine for Pentesting Training with scripts!. Building Your Cybersecurity Playground: Step-by-Step Guide to. https://1200km.com/articles/read/2024/2024-11-18-metasploit-modules-guide-auxiliary-1821db1712f0/ https://1200km.com/articles/read/2024/2024-11-18-metasploit-modules-guide-auxiliary-1821db1712f0/ Mon, 18 Nov 2024 00:00:00 GMT Metasploit modules guide. Auxiliary. Complete Explanation of Auxiliary Mode in Metasploit https://1200km.com/articles/read/2024/2024-11-17-the-ultimate-guide-to-metasploit-part-1-43c8573487df/ https://1200km.com/articles/read/2024/2024-11-17-the-ultimate-guide-to-metasploit-part-1-43c8573487df/ Sun, 17 Nov 2024 00:00:00 GMT The Ultimate Guide to Metasploit. Part 1.. A Complete Guide to Exploiting Vulnerabilities and Strengthening Security with Metasploit https://1200km.com/articles/read/2024/2024-11-16-the-basic-toolkit-for-penetration-testing-303da9234d82/ https://1200km.com/articles/read/2024/2024-11-16-the-basic-toolkit-for-penetration-testing-303da9234d82/ Sat, 16 Nov 2024 00:00:00 GMT The Basic Toolkit for Penetration Testing. Unlocking Vulnerabilities: A Comprehensive Guide to Essential Tools for Pen Testing https://1200km.com/articles/read/2024/2024-11-15-2john-9bb0bd44ed64/ https://1200km.com/articles/read/2024/2024-11-15-2john-9bb0bd44ed64/ Fri, 15 Nov 2024 00:00:00 GMT 2John. Full list of tools https://1200km.com/articles/read/2024/2024-11-15-john-the-ripper-hash-formats-f2ec958acaf8/ https://1200km.com/articles/read/2024/2024-11-15-john-the-ripper-hash-formats-f2ec958acaf8/ Fri, 15 Nov 2024 00:00:00 GMT John The Ripper Hash Formats. Reference https://1200km.com/articles/read/2024/2024-11-15-mastering-john-the-ripper-a-complete-guide-to-password-cracking-e42d68239c71/ https://1200km.com/articles/read/2024/2024-11-15-mastering-john-the-ripper-a-complete-guide-to-password-cracking-e42d68239c71/ Fri, 15 Nov 2024 00:00:00 GMT Mastering John the Ripper: A Complete Guide to Password Cracking. Unlock the power of John the Ripper, from basic setups to advanced password recovery. https://1200km.com/articles/read/2024/2024-11-13-web-applications-penetretion-testing-stage-2-scanning-and-vulnerability-assessment-15021e81c130/ https://1200km.com/articles/read/2024/2024-11-13-web-applications-penetretion-testing-stage-2-scanning-and-vulnerability-assessment-15021e81c130/ Wed, 13 Nov 2024 00:00:00 GMT Web Applications Penetration Testing. Stage 2: Scanning and Vulnerability Assessment. Identifying Weaknesses: Mastering the Art of Scanning and Vulnerability. https://1200km.com/articles/read/2024/2024-11-12-nikto-uncovering-web-server-vulnerabilities-with-an-open-source-scanner-6d2d2fbc1e21/ https://1200km.com/articles/read/2024/2024-11-12-nikto-uncovering-web-server-vulnerabilities-with-an-open-source-scanner-6d2d2fbc1e21/ Tue, 12 Nov 2024 00:00:00 GMT Nikto: Uncovering Web Server Vulnerabilities with an Open-Source Scanner. A Guide to Using Nikto for Identifying Security Flaws and Misconfigurations in Web. https://1200km.com/articles/read/2024/2024-11-12-owasp-zap-a-comprehensive-guide-to-web-application-security-testing-6c247f4be39b/ https://1200km.com/articles/read/2024/2024-11-12-owasp-zap-a-comprehensive-guide-to-web-application-security-testing-6c247f4be39b/ Tue, 12 Nov 2024 00:00:00 GMT OWASP ZAP: A Comprehensive Guide to Web Application Security Testing. Using OWASP ZAP for Identifying and Mitigating Web Application Vulnerabilities https://1200km.com/articles/read/2024/2024-11-11-mastering-burp-suite-vulnerability-scanner-019ed82c8bac/ https://1200km.com/articles/read/2024/2024-11-11-mastering-burp-suite-vulnerability-scanner-019ed82c8bac/ Mon, 11 Nov 2024 00:00:00 GMT Mastering Burp Suite Vulnerability Scanner. From configuration to result analysis, discover how to leverage Burp Suite’s automatic scanner for faster and. https://1200km.com/articles/read/2024/2024-11-10-censys-for-enhanced-cybersecurity-insight-533df14794bd/ https://1200km.com/articles/read/2024/2024-11-10-censys-for-enhanced-cybersecurity-insight-533df14794bd/ Sun, 10 Nov 2024 00:00:00 GMT Censys for Enhanced Cybersecurity Insight. A professional guide to understanding and utilizing Censys for advanced digital threat intelligence. https://1200km.com/articles/read/2024/2024-11-10-mastering-dirbuster-a-strategic-approach-to-uncovering-hidden-web-assets-31c8406a892b/ https://1200km.com/articles/read/2024/2024-11-10-mastering-dirbuster-a-strategic-approach-to-uncovering-hidden-web-assets-31c8406a892b/ Sun, 10 Nov 2024 00:00:00 GMT Mastering DirBuster: A Strategic Approach to Uncovering Hidden Web Assets. A comprehensive guide to using DirBuster for uncovering hidden directories and. https://1200km.com/articles/read/2024/2024-11-10-unlocking-web-intelligence-a-deep-dive-into-whatweb-8ee4e64ce411/ https://1200km.com/articles/read/2024/2024-11-10-unlocking-web-intelligence-a-deep-dive-into-whatweb-8ee4e64ce411/ Sun, 10 Nov 2024 00:00:00 GMT Unlocking Web Intelligence: A Deep Dive into WhatWeb. Explore how WhatWeb deciphers the technologies powering websites, enhancing security and reconnaissance. https://1200km.com/articles/read/2024/2024-11-10-web-applications-penetretion-testing-stage-1-reconnaissance-6b6b7aae0399/ https://1200km.com/articles/read/2024/2024-11-10-web-applications-penetretion-testing-stage-1-reconnaissance-6b6b7aae0399/ Sun, 10 Nov 2024 00:00:00 GMT Web Applications Penetration Testing. Stage 1: Reconnaissance. Unveil the first steps in securing web applications by exploring the essential techniques and. https://1200km.com/articles/read/2024/2024-11-09-mastering-the-basics-essential-cli-tools-for-reconnaissance-in-penetration-testing-ee7fd9e36394/ https://1200km.com/articles/read/2024/2024-11-09-mastering-the-basics-essential-cli-tools-for-reconnaissance-in-penetration-testing-ee7fd9e36394/ Sat, 09 Nov 2024 00:00:00 GMT Mastering the Basics: Essential CLI Tools for Reconnaissance in Penetration Testing. A Comprehensive Guide to Command Line Tools for Network Exploration: How. https://1200km.com/articles/read/2024/2024-11-07-sublist3r-your-essential-tool-for-subdomain-enumeration-c1910121d712/ https://1200km.com/articles/read/2024/2024-11-07-sublist3r-your-essential-tool-for-subdomain-enumeration-c1910121d712/ Thu, 07 Nov 2024 00:00:00 GMT Sublist3r. Your Essential Tool for Subdomain Enumeration. Uncovering Subdomains for Enhanced Reconnaissance: A Comprehensive Guide to Using Sublist3r for. https://1200km.com/articles/read/2024/2024-11-07-theharvester-your-essential-tool-for-osint-and-reconnaissance-in-cybersecurity-10aa6d76f5b3/ https://1200km.com/articles/read/2024/2024-11-07-theharvester-your-essential-tool-for-osint-and-reconnaissance-in-cybersecurity-10aa6d76f5b3/ Thu, 07 Nov 2024 00:00:00 GMT theHarvester: Your Essential Tool for OSINT and Reconnaissance in Cybersecurity. Learn how to leverage theHarvester to gather emails, subdomains, IPs, and. https://1200km.com/articles/read/2024/2024-11-06-owasp-amass-project-guide-94bd55521f91/ https://1200km.com/articles/read/2024/2024-11-06-owasp-amass-project-guide-94bd55521f91/ Wed, 06 Nov 2024 00:00:00 GMT OWASP Amass Project guide. In-depth Attack Surface Mapping and Asset Discovery. https://1200km.com/articles/read/2024/2024-11-05-sqlmap-a-deep-dive-into-automated-sql-injection-testing-part-2-advanced-custom-setup-0136ac6ffe53/ https://1200km.com/articles/read/2024/2024-11-05-sqlmap-a-deep-dive-into-automated-sql-injection-testing-part-2-advanced-custom-setup-0136ac6ffe53/ Tue, 05 Nov 2024 00:00:00 GMT SQLMap: A Deep Dive into Automated SQL Injection Testing. Part 2. (Advanced, custom setup). Learn how SQLMap transforms the landscape of database security by. https://1200km.com/articles/read/2024/2024-11-04-sqlmap-a-deep-dive-into-automated-sql-injection-testing-part-1-basic-wizard-6dd540363c83/ https://1200km.com/articles/read/2024/2024-11-04-sqlmap-a-deep-dive-into-automated-sql-injection-testing-part-1-basic-wizard-6dd540363c83/ Mon, 04 Nov 2024 00:00:00 GMT SQLMap: A Deep Dive into Automated SQL Injection Testing. Part 1. (basic, wizard). Learn how SQLMap transforms the landscape of database security by. https://1200km.com/articles/read/2024/2024-11-03-breaking-the-code-how-to-use-hashcat-for-effective-password-cracking-15f8da8facb8/ https://1200km.com/articles/read/2024/2024-11-03-breaking-the-code-how-to-use-hashcat-for-effective-password-cracking-15f8da8facb8/ Sun, 03 Nov 2024 00:00:00 GMT Breaking the Code: How to Use Hashcat for Effective Password Cracking. Your step-by-step guide to mastering Hashcat, from setting it up on your system to. https://1200km.com/articles/read/2024/2024-11-01-mastering-hydra-the-ultimate-guide-to-network-logon-cracking-182579dbaed1/ https://1200km.com/articles/read/2024/2024-11-01-mastering-hydra-the-ultimate-guide-to-network-logon-cracking-182579dbaed1/ Fri, 01 Nov 2024 00:00:00 GMT Mastering Hydra: The Ultimate Guide to Network Logon Cracking. Unlocking the Gates of Network Security: An In-Depth Exploration into Mastering Hydra for. https://1200km.com/articles/read/2024/2024-10-30-mastering-nmap-a-comprehensive-guide-to-network-exploration-and-security-auditing-part-4-s-5ec77704057f/ https://1200km.com/articles/read/2024/2024-10-30-mastering-nmap-a-comprehensive-guide-to-network-exploration-and-security-auditing-part-4-s-5ec77704057f/ Wed, 30 Oct 2024 00:00:00 GMT Mastering Nmap: A Comprehensive Guide to Network Exploration and Security Auditing. Part 4. Scripts. This a third part of comprehensive Medium post will. https://1200km.com/articles/read/2024/2024-10-29-passwords-cracking-zip-pdf-web-rdp-ssh-cameras-c1bacbd592cd/ https://1200km.com/articles/read/2024/2024-10-29-passwords-cracking-zip-pdf-web-rdp-ssh-cameras-c1bacbd592cd/ Tue, 29 Oct 2024 00:00:00 GMT Passwords cracking.ZIP, PDF, WEB, RDP, SSH, Cameras…. Dive into the art of password cracking with our guide that covers everything from brute force to. https://1200km.com/articles/read/2024/2024-10-28-mastering-nmap-a-comprehensive-guide-to-network-exploration-and-security-auditing-part-3-450eec6e9db2/ https://1200km.com/articles/read/2024/2024-10-28-mastering-nmap-a-comprehensive-guide-to-network-exploration-and-security-auditing-part-3-450eec6e9db2/ Mon, 28 Oct 2024 00:00:00 GMT Mastering Nmap: A Comprehensive Guide to Network Exploration and Security Auditing. Part 3. This a third part of comprehensive Medium post will delve into. https://1200km.com/articles/read/2024/2024-10-28-office-file-doc-docx-ppt-password-cracking-guide-with-real-life-examples-f8e356144ca4/ https://1200km.com/articles/read/2024/2024-10-28-office-file-doc-docx-ppt-password-cracking-guide-with-real-life-examples-f8e356144ca4/ Mon, 28 Oct 2024 00:00:00 GMT Office file (DOC, DOCX, PPT…) Password cracking. Guide with real life examples!. Unlock the secrets of Office file password cracking with our in-depth guide.. https://1200km.com/articles/read/2024/2024-10-28-pdf-file-password-cracking-guide-with-real-life-examples-901ee411a6f4/ https://1200km.com/articles/read/2024/2024-10-28-pdf-file-password-cracking-guide-with-real-life-examples-901ee411a6f4/ Mon, 28 Oct 2024 00:00:00 GMT PDF file Password cracking. Guide with real life examples!. Unlock the secrets of PDF file password cracking with our in-depth guide. Learn the tools. https://1200km.com/articles/read/2024/2024-10-28-zip-file-password-cracking-guide-with-real-life-examples-4e8705d51897/ https://1200km.com/articles/read/2024/2024-10-28-zip-file-password-cracking-guide-with-real-life-examples-4e8705d51897/ Mon, 28 Oct 2024 00:00:00 GMT ZIP file Password cracking. Guide with real life examples!. Unlock the secrets of ZIP file password cracking with our in-depth guide. Learn the tools. https://1200km.com/articles/read/2024/2024-10-27-mastering-nmap-a-comprehensive-guide-to-network-exploration-and-security-auditing-part-2-d5a95569031c/ https://1200km.com/articles/read/2024/2024-10-27-mastering-nmap-a-comprehensive-guide-to-network-exploration-and-security-auditing-part-2-d5a95569031c/ Sun, 27 Oct 2024 00:00:00 GMT Mastering Nmap: A Comprehensive Guide to Network Exploration and Security Auditing. Part 2. This a second part of comprehensive Medium post will delve into. https://1200km.com/articles/read/2024/2024-10-26-mastering-nmap-a-comprehensive-guide-to-network-exploration-and-security-auditing-part-1-f36d74d1b2c0/ https://1200km.com/articles/read/2024/2024-10-26-mastering-nmap-a-comprehensive-guide-to-network-exploration-and-security-auditing-part-1-f36d74d1b2c0/ Sat, 26 Oct 2024 00:00:00 GMT Mastering Nmap: A Comprehensive Guide to Network Exploration and Security Auditing. Part 1. This comprehensive post will delve into the powerful network. https://1200km.com/articles/read/2024/2024-10-24-cracking-web-interfaces-with-burp-suite-a-comprehensive-tutorial-33087bb286b0/ https://1200km.com/articles/read/2024/2024-10-24-cracking-web-interfaces-with-burp-suite-a-comprehensive-tutorial-33087bb286b0/ Thu, 24 Oct 2024 00:00:00 GMT Cracking Web Interfaces with Burp Suite: A Comprehensive Tutorial. In this guide, I will detail how to use Burp Suite, a popular web security tool, to. https://1200km.com/articles/read/2024/2024-10-24-shodan-guide-how-you-can-find-everything-640f47f41bbe/ https://1200km.com/articles/read/2024/2024-10-24-shodan-guide-how-you-can-find-everything-640f47f41bbe/ Thu, 24 Oct 2024 00:00:00 GMT Shodan Guide: How You Can Find Everything. In this guide, we’ll explore how to navigate Shodan, understand the information it provides, and https://1200km.com/articles/read/2024/2024-10-23-cracking-rtsp-security-a-comprehensive-guide-to-using-the-rtsp-brute-force-tool-ad1c29b9e5ee/ https://1200km.com/articles/read/2024/2024-10-23-cracking-rtsp-security-a-comprehensive-guide-to-using-the-rtsp-brute-force-tool-ad1c29b9e5ee/ Wed, 23 Oct 2024 00:00:00 GMT Cracking RTSP Security: A Comprehensive Guide to Using the RTSP Brute Force Tool. This article introduces a powerful tool designed for the RTSP Brute Force https://1200km.com/articles/read/2024/2024-10-23-cracking-ssh-with-metasploit-a-step-by-step-guide-to-exploiting-weak-credentials-3ec6ef4cee5b/ https://1200km.com/articles/read/2024/2024-10-23-cracking-ssh-with-metasploit-a-step-by-step-guide-to-exploiting-weak-credentials-3ec6ef4cee5b/ Wed, 23 Oct 2024 00:00:00 GMT Cracking SSH with Metasploit: A Step-by-Step Guide to Exploiting Weak Credentials. In this article, I will walk you through the process of cracking SSH using. https://1200km.com/articles/read/2024/2024-10-22-cracking-telnet-exploring-weaknesses-and-exploitation-techniques-af5d743abb09/ https://1200km.com/articles/read/2024/2024-10-22-cracking-telnet-exploring-weaknesses-and-exploitation-techniques-af5d743abb09/ Tue, 22 Oct 2024 00:00:00 GMT Cracking Telnet: Exploring Weaknesses and Exploitation Techniques. In this article, I will walk you through the process of cracking a Telnet service. https://1200km.com/articles/read/2024/2024-10-21-exploiting-ftp-vulnerabilities-for-effective-penetration-testing-a2810df78602/ https://1200km.com/articles/read/2024/2024-10-21-exploiting-ftp-vulnerabilities-for-effective-penetration-testing-a2810df78602/ Mon, 21 Oct 2024 00:00:00 GMT Exploiting FTP Vulnerabilities for Effective Penetration Testing. In this guide, we will explore common vulnerabilities in the File Transfer Protocol (FTP). https://1200km.com/articles/read/2024/2024-10-20-accessing-remote-desktops-a-beginner-s-guide-to-rdp-cracking-with-crowbar-and-ppg-tools-5f50027115b7/ https://1200km.com/articles/read/2024/2024-10-20-accessing-remote-desktops-a-beginner-s-guide-to-rdp-cracking-with-crowbar-and-ppg-tools-5f50027115b7/ Sun, 20 Oct 2024 00:00:00 GMT Accessing Remote Desktops: A Beginner’s Guide to RDP Cracking with Crowbar and PPG tools. Master the Techniques: Unveiling the Power of Crowbar and PPG to. https://1200km.com/articles/read/2024/2024-10-20-personal-pass-generator-ppg-the-ultimate-tool-for-custom-password-lists-4979a3a1385c/ https://1200km.com/articles/read/2024/2024-10-20-personal-pass-generator-ppg-the-ultimate-tool-for-custom-password-lists-4979a3a1385c/ Sun, 20 Oct 2024 00:00:00 GMT Personal Pass Generator (PPG): The Ultimate Tool for Custom Password Lists. Hello, my name is Andrey Pautov, and today I’m excited to introduce you to my. https://1200km.com/articles/read/2024/2024-10-17-wifi-cracking-with-aircrack-ng-d51cf98c789f/ https://1200km.com/articles/read/2024/2024-10-17-wifi-cracking-with-aircrack-ng-d51cf98c789f/ Thu, 17 Oct 2024 00:00:00 GMT WiFi cracking with Aircrack-ng. In this article, I am going to explain how you can crack a WiFi network using Aircrack-ng and the PPG — Personal Pass.