Juan M. R. - Jaymon Security

OSINT Techniques for Red Team Operations: Hands-on Lab

1. Introduction Before launching an attack against an organization, the attacker needs information: domains, subdomains, employee emails, technologies used, IP addresses, social media profiles, public repositories… This phase is called reconnaissance, and the tools that feed it are collectively known as OSINT (Open Source Intelligence). In this article we will explore the most effective OSINT techniques for Red Team Operations in 2026, with a step-by-step hands-on lab. We will cover everything from asset discovery to data correlation, using tools like Nmap, Subfinder, theHarvester and WFUZZ. 2. What is OSINT in Red Team? OSINT consists of collecting information from public sources …

REST API Security Testing with Burp Suite: Hands-on Lab

by Juan M. R.

Hacking

REST API Security Testing with Burp Suite: Hands-on Lab

1. Introduction REST APIs are the nervous system of modern applications: they connect frontends to backends, microservices to each other, and enable mobile devices to access data in real time. But if a poorly protected database can be compromised with SQL injection, a poorly designed API can expose the entire infrastructure with a single payload. In this article we will perform a complete security lab on a REST API using Burp Suite, the de facto standard tool for web pentesting. We will cover everything from endpoint discovery to exploiting common vulnerabilities: IDOR, missing rate limiting, parameter injection, and authentication errors. …

Prompt Injection in LLM-based Applications: Analysis, Exploitation and Defense

by Juan M. R.

Hacking

Prompt Injection in LLM-based Applications: Analysis, Exploitation and Defense

Prompt injection is the modern heir of SQL injection. In this article we analyze what it is, why it tops the OWASP Top 10 for LLM Applications, and we build a complete lab: jailbreak, indirect injection and exfiltration, with its defense in depth. …