Skip to main content
/posts

Posts

Article

Securing the RAN #2: Attacks on the Radio Interface

This post explores different attack surfaces, attack vectors, and attack scenarios across the RAN, explaining categories of threats and attacker TTPs supported by attack flow illustrations.

Wessam Deif Allah · Jun 29, 2026 · 12 min
Article

Can AI Detect Web Attacks Better Than Rules?

The real challenge is not choosing rules or AI, but designing detection systems that can operate under uncertainty and adversarial pressure. This article examines web attack detection and WAF evasion through scientific research and real-world observations.

Ahmed Maghawry · Jun 16, 2026 · 15 min
Write-up

CyCTF 2023 Challenge: A Whitebox Walkthrough of "The Secret App v1.0"

A whitebox walkthrough of the CyCTF 2023 'Secret App v1.0' challenge — chaining second-order blind SQL injection, a CAPTCHA logic flaw, and insecure session handling into a full admin account takeover.

Hussein Misbah · May 31, 2026 · 14 min
Article

SBOM Demystified: A Practical Guide to Software Supply Chain Transparency

Software is built like a layer cake full of libraries, packages, and hidden dependencies. But when a security crisis hits, do you really know what's inside your code? This is where a Software Bill of Materials (SBOM) becomes essential.

Heba Osama · May 12, 2026 · 8 min
Article

Remote Code Execution on SolarView Compact Firmware: A Technical Walkthrough

In this post, we demonstrate how we achieved Remote Code Execution (RCE) on a web server connected to a solar system monitoring firmware: SolarView Compact. This walkthrough covers four key stages: Firmware Extraction, Reconnaissance, Code Review, and Exploitation.

Khaled Emad · Apr 27, 2026 · 5 min
Article

Securing the RAN #1: An Introduction

When people talk about mobile network security, the conversation almost always gravitates toward the core network. However, there is another part of the network that quietly sits in public spaces, exposed by design: the Radio Access Network (RAN).

Wessam Deif Allah · Apr 9, 2026 · 3 min