Rocky - DEV Community

Rocky

Aug 30

The Alert You Stopped Reading Is the One That Mattered

#security #soc #blueteam #siem

4 min read

Rocky

Aug 30

The Scanner Passed This App. The Approve Button Didn't Need to Be Clicked.

#security #appsec #pentesting #webdev

3 min read

Rocky

Aug 30

The Invoice Email Had the CFO's Name on It, and the Headers Said Otherwise

#cybersecurity #dfir #forensics #infosec

2 min read

Rocky

Aug 30

The Client Said Everything Was HTTPS, So MITM Testing Wasn't in Scope

#cybersecurity #pentesting #networking #infosec

2 min read

Rocky

Aug 29

The Interview Question Was Just curl -I Against a URL

#cybersecurity #appsec #http #webdev

2 min read

Rocky

Aug 29

The Codebase Was 40,000 Lines and the Engagement Was Three Days Long

#cybersecurity #appsec #ai #pentesting

3 min read

Rocky

Aug 29

The Shell You Don't Migrate Is a Shell You're About to Lose

#cybersecurity #metasploit #redteam #pentesting

2 min read

Rocky

Aug 29

The Kerberoasting Detection Rule That Never Fires

#cybersecurity #activedirectory #soc #blueteam

2 min read

Rocky

Aug 29

The Stored XSS That Got Downgraded to Low

#cybersecurity #appsec #xss #websecurity

2 min read

Rocky

Aug 28

The Input Field That Passed Every SQLi Test

#cybersecurity #appsec #sqli #database

2 min read

Rocky

Aug 28

The JWT Said alg: none and the API Still Said Yes

#cybersecurity #appsec #api #jwt

2 min read

Rocky

Aug 28

Root Inside the Container Isn't Root. Here's What Actually Is.

#cybersecurity #linux #redteam #privilegeescalation

3 min read

Rocky

Aug 28

The Recon Step You Skim Past at 11PM Is the One That Was Interesting

#cybersecurity #pentesting #ai #python

1

3 min read

Rocky

Aug 27

Three Things to Check Before You Ever Run the Suspicious .exe

#cybersecurity #malware #malwareanalysis #blueteam

3 min read

Rocky

Aug 27

The MFA Rollout Didn't Stop Us. The Helpdesk Call Did.

#cybersecurity #redteam #socialengineering #pentesting

3 min read

Rocky

Aug 27

Your First Cloud Pentest Isn't Going to Play Out Like Your Last AD Engagement

#cybersecurity #cloudsecurity #pentesting #aws

2 min read

Rocky

Aug 26

BloodHound Shows No Path to Domain Admin. That's Not the End of the Assessment.

#cybersecurity #activedirectory #redteam #pentesting

3 min read

Rocky

Aug 26

The Alert That Killed Nobody's Machine Is the One You Should Be Worried About

#cybersecurity #soc #malwareanalysis #blueteam

3 min read

Rocky

Aug 26

Your First Internal Pentest Foothold Makes You Want to Dump Every Credential in Sight. Don't.

#cybersecurity #pentesting #redteam #activedirectory

2 min read

Rocky

Aug 25

The HSTS Header You Just Marked 'Pass' Doesn't Protect the Request That Actually Matters

#cybersecurity #appsec #pentesting #webdev

2 min read

Rocky

Aug 25

One Unauthenticated POST Request Was All It Took to Hijack This AI Agent Platform

#security #ai #cybersecurity #opensource

2 min read

Rocky

Aug 25

Your Detection Rules Have Ten Years of Windows Logic and Zero Lines for a Stolen IAM Key

#cybersecurity #cloudsecurity #aws #blueteam

3 min read

Rocky

Aug 25

Your Old Buffer Overflow Tutorial Doesn't Work Anymore, and That's the Whole Lesson

#cybersecurity #pwn #binaryexploitation #infosec

3 min read

Rocky

Aug 24

The Alert Isn't the Problem, Your Third Blank Triage Decision Tonight Is

#soc #blueteam #infosec #cybersecurity

3 min read

Rocky

Aug 24

You Ran the Deauth Attack Correctly. The Client Just Didn't Care.

#wireless #pentesting #redteam #infosec

3 min read

Rocky

Aug 24

The Scanner Came Back Clean. The Discount Code Still Worked 40 Times.

#appsec #webdev #security #pentesting

3 min read

Rocky

Aug 24

Nobody Assigned You This Hunt: Starting From an ATT&CK Technique Instead of a Ticket

#threathunting #blueteam #mitre #infosec

3 min read

Rocky

Aug 24

The Memory Dump Lands in Your Queue. Where Do You Actually Look First?

#forensics #dfir #blueteam #infosec

3 min read

Rocky

Aug 24

The Interview Question That Trips Up Junior Red Teamers: What Do You Check Before Mimikatz?

#redteam #activedirectory #pentesting #infosec

3 min read

Rocky

Aug 23

You Have a Shell as www-data. Now What?

#cybersecurity #linux #pentesting #infosec

3 min read

Rocky

Aug 23

Your SQL Injection Test Isn't Done Until You've Ruled Out Blind

#cybersecurity #sqlinjection #appsec #infosec

3 min read

Rocky

Aug 23

The Clean Scanner Report Is Not the Same As a Clean App

#cybersecurity #appsec #burpsuite #infosec

3 min read

Rocky

Aug 23

Getting a Meterpreter Session Is Not the Deliverable

#cybersecurity #metasploit #pentesting #redteam

2 min read

Rocky

Aug 22

Porting a Detection Rule to a New SIEM Isn't a Copy-Paste Job

#cybersecurity #siem #detectionengineering #soc

3 min read

Rocky

Aug 22

How to Actually Find IDOR and BOLA Bugs in an API

#cybersecurity #api #appsec #infosec

3 min read

Rocky

Aug 22

How to Check Closed-Source Firmware for Known CVEs (No Source Code Needed)

#cybersecurity #reverseengineering #firmware #infosec

3 min read

Rocky

Aug 18

5 AI Security Projects That Will Get You Hired in 2026 (And Beyond)

#ai #beginners #security #career

9 min read

Rocky

Aug 16

The Gap Nobody Talks About in Web Hacking

3 min read

Rocky

Jul 21

I Wrote the Red Team Books I Wish Existed When I Was Starting Out

#cybersecurity

4 min read

Rocky

Jul 19

How I Cut My Claude Code Token Usage by 70% (and Got Better Output)

#ai #claude

4

2

4 min read

Rocky

Jul 15

I Got Tired of Cybersecurity Being Taught Like a Second Language. So I Built a Translator.

#webdev #cybersecurity

2 min read

Rocky

Jul 12

🚀 I Built CODELIVLY — A Platform to Learn Cybersecurity Through Hands-On Practice

#webdev #saas #cybersecurity #career

5

2 min read

Writing Debut