I created a simple Arduino-based traffic light simulation — but what started as a learning project turned into a realization: many legacy systems are fragile, unprotected, and vulnerable to exploitation.

read here: www.notfoundsec.com/traffic-ligh...

I modified a simple LED Arduino project into a malicious firmware that blinks "HACKED" in Morse code.

This side channel attack reflects real-world LED exfiltration research

read more here: www.notfoundsec.com/blink-to-bac...

#cybersecurity #iot #iotsecurity #arduino #firmware #signalintel

Many OSINT workflows ignore non-English sources — and that’s a huge blind spot.

I wrote a mini-course to help break that barrier using tools, techniques, and survival tips for multilingual investigations.

📝 www.notfoundsec.com/breaking-the...

❄️ Just published a breakdown on Sliver C2 and beaconing

What Sliver is and why it's used

How beaconing works

How attackers stay hidden

How defenders can spot & block it

Includes a full walkthrough and mitigation tips.

📝 www.notfoundsec.com/sliver-c2-an...

#cybersecurity

Just published a walkthrough on XOR — simple, reversible, and loved by malware devs.

What XOR is
How malware uses it to obfuscate
Go demo that locks/unlocks files

📝 www.notfoundsec.com/xor-in-go-lo...

I just got interviewed by @italki about my journey as a Technology Teacher!
I teach not just English, but also hands-on tech concepts like dev & cybersecurity
I am thankful for all the support1 — excited to keep building the bridge between tech + communication

Hey everyone! I made my first mini course about Geospatial Intelligence and how it can be used for anyone!
If you want to check it out and see how you can use it check out my post!

www.notfoundsec.com/how-to-find-...

Thank you and Enjoy

Recently, I became an OSINT Trainer for @tracelabs.bsky.social

So I have the opportunity to increase my technical teaching and help a great cause. Im excited to see how I will grow as an educator

Just wrapped up a walkthrough on exploiting Directory Traversal in PortSwigger Academy.

I break down the attack flow, impact, and common misconfigurations that make it possible.

Read here:
www.notfoundsec.com/directory-tr...

New blog post up:
Exploiting CSRF with No Defenses (PortSwigger Lab Walkthrough)

If you're brushing up on CSRF techniques or learning web app security, this write-up walks through the full exploitation flow and key lessons from the lab.

www.notfoundsec.com/exploiting-c...

Just published a write-up on directory enumeration using ffuf against OWASP Juice Shop.

I walk through the recon process, how to spot hidden endpoints, and the risks of forgotten directories in production.

www.notfoundsec.com/directory-bu...

Looks like important web pages are being disrupted.

People should familiarize themselves with the wayback machine and find archived data on the internet.

web.archive.org

Currently learning C for malware development and malware analysis. This language definitely is no joke! It's hard but i love it!

I think research has become a new addiction because I want to understand how things work

Whenever I have to review c#