Archive
Browse everything published on Mahisec.
Cybersecurity
PromptSpy is Android malware that uses Google Gemini as a live AI decision-maker to understand the victim’s screen and control the device. Here’s how AI-driven malware replaces hardcoded automation with an Observe → Analyze → Act → Verify loop.
October 14, 2026 · 5 min read
Cybersecurity
PentAGI is an interesting look at where AI-powered penetration testing is heading. It doesn't replace tools like Nmap or Metasploit — it adds an AI layer that can connect tools, analyze results, and decide what to investigate next.
October 12, 2026 · 5 min read
Tools
SpiderSuite is an open-source web security crawler built for reconnaissance and attack-surface mapping. It helps bug bounty hunters discover endpoints, hidden resources, historical URLs, and application structure before deeper security testing.
October 7, 2026 · 5 min read
OWASP TOP 10
Learn how Security Misconfiguration creates vulnerabilities through insecure defaults, exposed services, debug settings, cloud permissions, error messages, and missing security hardening.
October 6, 2026 · 5 min read
Web & API Pentest
Learn how Broken Access Control allows attackers to access data, functions, or resources they should not be allowed to use, with practical examples and prevention techniques.
October 3, 2026 · 5 min read
Cybersecurity
How the Contagious Interview campaign uses fake recruiters and coding assignments to deliver malware, steal credentials and target developer environments.
September 29, 2026 · 5 min read
Web & API Pentest
A practical guide to understanding HTTP requests, methods, headers, cookies, parameters, authentication, and status codes. Learn how to analyze HTTP traffic effectively before starting web application security testing.
September 28, 2026 · 10 min read
BUG BOUNTY
A practical roadmap to learn bug bounty hunting from the ground up. Learn the right skills, tools, labs, and methodology—and work toward finding your first valid bug.
September 24, 2026 · 5 min read
Cybersecurity
Most employers weren't looking for elite hackers. They were looking for strong fundamentals, practical skills, and people who can solve…
September 8, 2026 · 5 min read
Cybersecurity
Hackers didn't attack Target first. They hacked a small HVAC company - and used that access to steal 40 million credit card numbers.
September 8, 2026 · 5 min read
Cybersecurity
A detailed look at what happens behind the scenes when cybercriminals trick users into clicking malicious links.
September 8, 2026 · 5 min read
Cybersecurity
From a single click to a full account takeover - discover the hidden chain of events behind modern phishing attacks.
September 8, 2026 · 5 min read
Cybersecurity
Most beginners land a shell on a Linux system and immediately run LinPEAS.
September 8, 2026 · 5 min read
Cybersecurity
In December 2020, cybersecurity company FireEye discovered that its own red-team tools had been stolen. As investigators dug deeper, they…
September 8, 2026 · 5 min read
Cybersecurity
From Manual Scanning to Automated
August 29, 2026 · 5 min read
