Offensive tradecraft, deep-dive vulnerability research, threat actor analysis, and modern cybersecurity methodology.
Learn what HTTP security headers do (HSTS, CSP, nosniff, framing, referrer, permissions), how to check them live, common misconfigs, and a safe fix order.
Complete operational masterclass guide to 25+ AWS IAM privilege escalation paths: from policy version hijacking and PassRole confused-deputy exploits to Pacu/PM…
Found a number like 1700000000 in a log, JWT or API response? Learn what Unix epoch time means, how to tell seconds from ms, and why it matters for tokens, fore…
The Mariana web is a 2012 troll. We trace the hoax and map the real dark web using Tor Metrics data, academic studies, takedowns and defender guidance.
Where Guard fits next to MCPGrade: grade vs gate, protocol-native enforcement for MCP tool calls, and how Andrax points to guard.sentinelreign.com without shipp…
Comprehensive 2026 hands-on security guide and pentesting masterclass on auditing OAuth 2.0 and OpenID Connect (OIDC) implementations. Learn PKCE bypasses, loos…
Point-in-time MCP grades find risk; runtime firewalls enforce policy on tool calls. Andrax mcpgrade-1.4.0 vs Guard mcpgrade-2.0.0 — no score equating.
Azure Blob Storage security checklist 2026 — Entra ID, RBAC, Shared Key hardening. Defensive guide from Andrax Pentester.
CTF writeup guide 2026 — write reasoning-first walkthroughs that teach, not flag dumps. From Andrax Pentester.
OSINT beginner guide 2026 — a legal, ethics-first methodology for open-source intelligence. From Andrax Pentester.
Andrax Pentester is not Android ANDRAX — we are a cybersecurity education site and MCP security grader at andraxpentester.in. Clear the name collision in one mi…
An exhaustive analysis of critical security flaws in AI agent MCP bridges and eBPF kernel instrumentation, featuring empirical exploitation mechanics, detection…
