Password entropy measures how hard a secret is to guess, in bits. Here is the formula, why Password1! fails it, and how to generate something strong.
A hash is a fixed-length fingerprint of data. Here is how MD5 and SHA-256 differ, why fast hashes are wrong for passwords, and what HMAC adds.
A JWT is a signed bundle of JSON claims. Here is how to read one, why decoding is not verifying, and how to check for the classic JWT security flaws.
A cron expression is five fields that say when a job runs. Here is how to read them, avoid the OR, step and DST traps, and audit crontabs safely.
An IPv4 address is one 32-bit number. Here is how to read it as decimal, hex, binary or integer, size a CIDR block, and spot private ranges.
A TLS certificate binds a domain name to a public key. Here is how I read one, trace its chain, fix common errors, and check CSRs and CAA records.
This checklist shows how to vet an MCP server before an agent touches it, from provenance and reading a published grade honestly to auth, version pinning and cr…
A CVSS vector is the reasoning behind the score. This guide reads 3.1 and 4.0 strings, shows where they differ, and explains why the base number is not patch pr…
A PTR record maps a public IP back to a hostname. That name is untrusted until a forward lookup returns the same address.
Learn how to install Kali Linux dual boot alongside Windows 10/11. Complete step-by-step guide with partitioning, GRUB setup, troubleshooting, and safety warnin…
Magic bytes name a format from leading or offset bytes, not the filename: PNG, PDF, ZIP, ELF and MZ, why a shared PK match is incomplete, and how to check an up…
What SPF, DKIM, and DMARC do, why aligned SPF or DKIM is enough for DMARC, and how to grade your domain with a live checker.
Transparent vs UUPS, uninitialized implementations, and storage-layout collisions — local forge inspect lab. No live upgrades.
How to write an Immunefi-ready bug report: structure, PoC expectations, severity language — template practice only.
First-depositor donation can round the next mint to zero shares. Local toy vault plus OpenZeppelin virtual-offset discussion.
Missing chainId, permit phishing, and ecrecover to the zero address — replay a toy signature across two local chain ids.
Spot, TWAP, and Chainlink staleness for bug hunters — price-assumption checklist on a local toy lender. No live oracle attacks.
Flash loans as amplifiers — not magic bugs — with Aave-style callback mental models and DVD / local CTF lab pointers. Authorized labs only.
Hunter workflow for verified and unverified contracts: Etherscan Contract tab, Sourcify exact vs match, ABI decoding, and read-only cast storage on a public exa…
Access control bugs hunters actually find — missing onlyOwner, initializer takeover, and tx.origin auth — with an Ethernaut-style Foundry lab.
Practical Foundry + Slither setup: foundryup, forge init, Slither venv, slither . on a local vulnerable vault, optional Aderyn. Anvil/local forks only.
Classic, cross-function, and read-only reentrancy for bug hunters — CEI, guards, OWASP SC08:2026, and a Foundry PoC against a local vulnerable vault only.
Solidity for bug hunters: a read-first primer on visibility, msg.sender vs tx.origin, call vs delegatecall, value transfers, and CEI — with tiny snippets only.…
Practical wallet, public RPC, and Etherscan/Sourcify setup for smart contract hunters — burner accounts, read-only chain access, and a lab that explains one his…
Where and how to submit in 2026. Teach process, not spray-and-pray.
Hunter view of governance, bridges, and L2 trust. Read three public write-ups. No live probing.
The Andrax learning path for web3 bug hunting in 2026: ethics fence, platform map, ordered guides, toolchain, CTF→First Flight→bounty ladder, and how to study p…
A beginner-friendly, ethics-first guide to how to start web3 bug hunting in 2026 — authorized bounties, local forks/CTFs, and an Immunefi scope checklist.
Pick a public-scope program, run a fork-only hunter loop, and stop before any mainnet or public-testnet interaction.
Need to read a domain's registration record? Here is what WHOIS and RDAP mean in 2026, which fields matter for hygiene and IR triage, why registrant data is oft…
Learn what HTTP security headers do (HSTS, CSP, nosniff, framing, referrer, permissions), how to check them live, common misconfigs, and a safe fix order.
Step-by-step hands-on tutorial on deploying CloudGoat IAM labs, running Pacu 1.7.0 and PMapper scanners, exploiting policy version rollbacks, and writing custom…
Complete operational masterclass guide to 25+ AWS IAM privilege escalation paths: from policy version hijacking and PassRole confused-deputy exploits to Pacu/PM…
Found a number like 1700000000 in a log, JWT or API response? Learn what Unix epoch time means, how to tell seconds from ms, and why it matters for tokens, fore…
The Mariana web is a 2012 troll. We trace the hoax and map the real dark web using Tor Metrics data, academic studies, takedowns and defender guidance.
What breaks on an OAuth or OIDC login: redirect matching, PKCE, state, and the Host header. What I check, and what I turn on. No exploit lab.
Where Guard fits next to MCPGrade: grade vs gate, protocol-native enforcement for MCP tool calls, and how Andrax points to guard.sentinelreign.com without shipp…
Comprehensive 2026 hands-on security guide and pentesting masterclass on auditing OAuth 2.0 and OpenID Connect (OIDC) implementations. Learn PKCE bypasses, loos…
Hands-on red team guide to auditing and exploiting AI agents in 2026. Covers indirect prompt injection, EchoLeak markdown exfiltration, MCP tool description rug…
Master Cross-Site WebSocket Hijacking (CSWSH) in 2026. Explore HTTP/1.1 upgrade mechanics, Origin header bypasses, token leakage via query params, weaponized HT…
Master production eBPF kernel security programming in C and Rust. Learn BPF CO-RE, LSM hooks, ring buffers, libbpf loaders, Aya, and anti-evasion techniques wit…
Hands-on masterclass on auditing and exploiting GraphQL API vulnerabilities (introspection bypasses, alias rate-limit bypasses, BOLA, depth DoS) with full runna…
Point-in-time MCP grades find risk; runtime firewalls enforce policy on tool calls. Andrax mcpgrade-1.4.0 vs Guard mcpgrade-2.0.0 — no score equating.
Hands-On Tutorial: Kubernetes RBAC Privilege Escalation, Service Account Abuse & Container Breakouts (2026 Masterclass) **Author:** Syed Zida Abrar * Publish…
Deep-dive technical tutorial on defeating multi-layered Android native anti-analysis mechanisms: from hooking libc file reads (/proc/self/maps) to ARM64 in-memo…
Azure Blob Storage security checklist 2026 — Entra ID, RBAC, Shared Key hardening. Defensive guide from Andrax Pentester.
CTF writeup guide 2026 — write reasoning-first walkthroughs that teach, not flag dumps. From Andrax Pentester.
OSINT beginner guide 2026 — a legal, ethics-first methodology for open-source intelligence. From Andrax Pentester.
Andrax Pentester is not Android ANDRAX — we are a cybersecurity education site and MCP security grader at andraxpentester.in. Clear the name collision in one mi…
What a bring-your-own-vulnerable-driver issue is, why it starts from local admin, and the three controls I check. The lab is not published.
Learn how to build and deploy an enterprise-grade Zero-Trust Sandbox Firewall for Model Context Protocol (MCP) servers in TypeScript. Prevent Indirect Prompt In…
An exhaustive analysis of critical security flaws in AI agent MCP bridges and eBPF kernel instrumentation, featuring empirical exploitation mechanics, detection…
Master Model Context Protocol (MCP) security auditing. Build automated Python static AST and JSON-Schema analyzers to detect indirect prompt injection and tool…
Comprehensive guide to Android security architecture, ART memory layout, JNI execution, Frida dynamic instrumentation, and multi-layer SSL pinning bypass.
A definitive, hands-on 2026 security audit guide for GraphQL APIs: covering schema discovery, introspection analysis, authorization auditing (BOLA/BFLA), query…
Master Android 14/15 SSL pinning bypass using Frida, Objection, and native BoringSSL hooks. Learn how to intercept HTTPS traffic in enterprise applications with…
Master Active Directory intra-forest trust exploitation. Learn how child domain compromise leads to full parent forest escalation via SID History injection (Ext…
Complete masterclass blueprint on Linux Kernel Security Modules (LSM) and eBPF syscall hooking. Learn step-0 kernel memory architecture, BPF CO-RE, verifier con…
Master real-time Linux threat detection by compiling SigmaHQ rules into AST decision trees evaluated against live eBPF kernel tracepoints (sys_enter_execve) in…
A comprehensive first-principles guide to assessing and securing web APIs in 2026, covering OWASP API Top 10, BOLA testing, JWT security, GraphQL audits, and Fa…
A hands-on masterclass covering Active Directory Kerberos delegation attacks: Unconstrained, Constrained (S4U2Self/S4U2Proxy), and Resource-Based Constrained De…
A comprehensive technical breakdown of Active Directory Certificate Services (ADCS) security architecture, analyzing ESC1/ESC8 misconfigurations, PowerShell aud…
Architect and deploy a production-grade Micro-SaaS platform with Next.js 16, Better-Auth, Drizzle ORM, and multi-tenant security controls.
Learn how to build zero-trust FastMCP servers in Python and harden Next.js 16 AI agent architectures against indirect prompt injection, tool poisoning, and unau…
Complete 2026 guide to Active Directory Certificate Services (AD CS) security. Master ESC1/ESC8 misconfiguration mechanics, theoretical LDAP auditing, defensive…
A masterclass on engineering a production-grade headless Python/C mobile dynamic analysis harness for Android ART internals, JNI method resolution, Dobby-style…
> **Bottom Line Up Front (BLUF):** Linux containers are not virtual machines; they are standard operating system processes constrained by kernel-level isolation…
Master volatile memory forensics and incident response automation in Python 3. Learn virtual memory mechanics, page table traversal, Volatility 3 integration, Y…
Build a zero-dependency Python 3.11+ AST detection engine that transpiles Sigma rules into Microsoft KQL, Elastic EQL, and real-time in-memory event evaluators.
Building a Production-Grade Web Application Firewall (WAF) & AST Rule Compiler in Go: Stateful Inspection, Rate Limiting & Architecture (2026 Masterclass) ---…
Deep technical masterclass on eBPF security engineering: building real-time kernel execution monitoring in C & Go with CO-RE, analyzing offensive rootkits, and…
Master Linux binary exploitation from stack-based buffer overflows through return-oriented programming (ROP) chains to bypassing ASLR, NX, and stack canaries —…
What MCPGrade checks, and the live homepage counter on 3 Oct 2026: 5,363 servers graded, 64% with no auth. The old 5,308 and 65% figures are removed.
Complete practical lab guide to LLMNR/NBT-NS poisoning, NetNTLMv2 hash cracking with Hashcat rules, NTLM relaying to SMB/LDAP via ntlmrelayx, and Enterprise SIE…
Master real-world cloud penetration testing. Deep-dive into AWS S3 bucket ACL bypasses, IAM privilege escalation paths, IMDSv2 SSRF vectors, and Kubernetes RBAC…
A step-by-step penetration testing lab guide. Learn how to setup a test environment, identify BOLA vulnerabilities using Burp Suite Repeater/Match & Replace, an…
An exhaustive 2026 technical guide to API security assessments. Master OWASP API Top 10, BOLA, BFA, mass assignment, GraphQL security, and automated recon tools…
What Kerberoasting and AS-REP roasting are, which Windows events point at them, and how to shut them down. This is not a cracking lab.
How Active Directory misconfigurations become a path to a privileged account, and the reviews that break those paths. The old Fortune 1000 stat is removed.
Master penetration testing with our comprehensive 2026 checklist. From pre-engagement to reporting, this guide covers every phase of a professional pentest with…
Discover the three main penetration testing types—Black Box, White Box, and Gray Box—and learn which methodology best fits your security testing needs. Complete…
Master web application security testing with this comprehensive guide. Learn testing methodologies, OWASP best practices, essential tools (Burp Suite, ZAP, Nmap…
Master Nano, Vim, and Emacs text editors for penetration testing on Kali Linux. Learn essential commands, shortcuts, and workflows for editing config files, bas…
Master the apt package manager, dpkg, and snap in Kali Linux. Learn essential package management commands, repository configuration, and security tool installat…
Complete beginner's guide to Linux process management in Kali Linux. Learn process monitoring with ps, top, htop, process control with kill signals, systemd ser…
Master linux networking fundamentals for penetration testing. Learn IP addresses, network interfaces, ports, protocols, DNS configuration, and network troublesh…
Master bash scripting fundamentals for penetration testing and ethical hacking. Learn variables, loops, conditionals, functions, and build practical automation…
A curated list of the most useful MCP servers in 2026 — GitHub, Filesystem, Fetch, Slack, Playwright and more — with an honest security note on each and a check…
MCP servers can hand an AI agent private data, untrusted content, and a way to exfiltrate it — the lethal trifecta. How prompt injection works over MCP, and how…
Before you connect an MCP server to your AI agent, inspect it: its tools, input schemas, resources, prompts, and instructions. A step-by-step guide to testing a…
Tool poisoning hides instructions inside an MCP tool’s description that your AI agent obeys but you never see. Here is how the attack works, its variants, and h…
A practitioner’s guide to Model Context Protocol security: the MCP threat model, tool poisoning, prompt injection, rug pulls, and how to vet a server before you…
Comprehensive penetration testing salary guide for 2026. Discover how much pentesters earn by experience level, location, certification, and industry. Includes…
The best penetration testing certifications for 2026 compared: what each exam makes you do, who it suits, and which to pick for your level and budget.
Discover the complete roadmap to becoming a penetration tester in 2026. Learn essential skills, certifications, hands-on practice platforms, salary expectations…
Master Linux administration with this comprehensive guide to user and group management in Kali Linux. Learn useradd, usermod, group permissions, sudo configurat…
Master Linux file permissions and ownership in Kali Linux. Learn chmod, chown, SUID, SGID, sticky bits, and how permissions affect penetration testing. Complete…
Master the Linux terminal from scratch. Learn bash commands, pipes, redirections, environment variables, and essential command line skills for Kali Linux penetr…
Master 50+ essential Kali Linux commands for penetration testing and ethical hacking. Complete guide with practical examples, organized by category for beginner…
Master the Linux file system hierarchy, navigation commands, and essential directory structures for penetration testing. Learn cd, ls, pwd, find commands and un…
Authorization-first web recon: passive OSINT, disciplined scope, light active mapping, and hypothesis handoff.
Orientation guide to Andrax Pentester: articles, tutorials, research, writeups, cheatsheets, MCPGrade, learn paths, and labs.
The ultimate Nmap cheat sheet for penetration testers and security professionals. Complete command reference with practical examples, scan types, NSE scripts, f…
Discover the most powerful penetration testing tools in 2026. From information gathering to post-exploitation, learn which tools security professionals rely on…
Learn what penetration testing is, how it works, and why it's critical for cybersecurity. This complete guide covers types, methodologies, tools, certifications…
Complete guide to installing Kali Linux as a single boot system on bare metal. Learn why single boot offers best performance, step-by-step installation walkthro…
Learn how to run Kali Linux on your Android device using Termux. This comprehensive guide covers installation methods, essential tools, Wi-Fi auditing capabilit…
Learn how to install and configure Kali Linux on Raspberry Pi for portable penetration testing. Complete setup guide covering ARM image installation, Wi-Fi conf…
Master Kali Linux user management from the ground up. Learn about default credentials, password security, creating users, sudo configuration, SSH keys, and esse…
Master Kali Linux configuration with this comprehensive guide covering apt sources, network settings, SSH hardening, firewall setup, desktop customization, and…
Complete guide to Kali Linux post-installation setup. Learn essential configuration steps, security hardening, tool installation, and system optimization for pe…
Learn how to create a Kali Linux Live USB with Rufus, BalenaEtcher, or dd. Includes persistent storage setup, encrypted persistence, troubleshooting, and use ca…
Learn how to install Kali Linux in VMware Workstation or Player with our complete step-by-step guide. Pre-built images, manual installation, troubleshooting, an…
Learn how to install Kali Linux in VirtualBox step-by-step. Complete beginner-friendly guide with system requirements, configuration tips, troubleshooting, and…
Master SQL injection prevention with this comprehensive guide. Learn parameterized queries, input validation, secure coding patterns, and defense strategies acr…
Complete SQL injection cheat sheet with 100+ payloads, bypass techniques, and sqlmap commands. Reference guide for MySQL, MSSQL, PostgreSQL, Oracle, and SQLite.
Master blind SQL injection techniques including boolean-based and time-based exploitation. Learn character-by-character data extraction, optimization strategies…
Master union-based SQL injection techniques with this comprehensive guide. Learn step-by-step exploitation from column enumeration to data extraction across MyS…
Master SQL injection with this hands-on tutorial using DVWA. Step-by-step walkthrough from beginner to advanced techniques with real examples and code.
Master all SQL injection types: error-based, union-based, blind (boolean & time-based), and out-of-band. Complete guide with code examples, comparison table, an…
Learn what SQL injection is, how it works, and why it's still one of the most dangerous web vulnerabilities in 2026. Complete beginner's guide with real example…
Lab-style walkthrough of stored XSS in a reporting portal: recon, sink identification, PoC pattern, impact, and remediation.
How SPA client routing, history state, deep links, and JS bundle route tables interact with real authorization boundaries.
New to CTF? Learn everything about Capture the Flag cybersecurity competitions, from web exploitation to forensics. Start your CTF journey with this complete be…
Master API security testing with this comprehensive 2026 guide. Learn OWASP API Top 10 vulnerabilities, testing methodologies, and best practices for securing R…
Master the complete penetration testing methodology: 7 phases, industry standards (PTES, OWASP, NIST), tools, and reporting best practices for security professi…
Understand the critical differences between penetration testing and vulnerability scanning. Learn which security approach your organization needs and how they c…
Master web application security with our comprehensive guide to the OWASP Top 10 2025. Learn about the most critical security risks, real-world examples, preven…
