OSINT Techniques for Red Team Operations: Hands-on Lab
1. Introduction Before launching an attack against an organization, the attacker needs information: domains, subdomains, employee emails, technologies used, IP addresses, social media profiles, public repositories… This phase is called reconnaissance, and the tools that feed it are collectively known as OSINT (Open Source Intelligence). In this article we will explore the most effective OSINT techniques for Red Team Operations in 2026, with a step-by-step hands-on lab. We will cover everything from asset discovery to data correlation, using tools like Nmap, Subfinder, theHarvester and WFUZZ. 2. What is OSINT in Red Team? OSINT consists of collecting information from public sources …
REST API Security Testing with Burp Suite: Hands-on Lab
1. Introduction REST APIs are the nervous system of modern applications: they connect frontends to backends, microservices to each other, and enable mobile devices to access data in real time. But if a poorly protected database can be compromised with SQL injection, a poorly designed API can expose the entire infrastructure with a single payload. In this article we will perform a complete security lab on a REST API using Burp Suite, the de facto standard tool for web pentesting. We will cover everything from endpoint discovery to exploiting common vulnerabilities: IDOR, missing rate limiting, parameter injection, and authentication errors. …
Prompt Injection in LLM-based Applications: Analysis, Exploitation and Defense
Prompt injection is the modern heir of SQL injection. In this article we analyze what it is, why it tops the OWASP Top 10 for LLM Applications, and we build a complete lab: jailbreak, indirect injection and exfiltration, with its defense in depth. …
Resources for training and awareness in Cybersecurity
Resources for Cybersecurity Awareness: Phishing, BadUSB, Ransomware, etc. …
How can I send and share information anonymously?
1. Introduction. Level of Technical Knowledge: Low; Reading Time: 7 min.; Hashtags: #anonymous In this article, we will review and explain in detail various ways to send and share information anonymously, whether through emails, instant messaging, or sharing files through our own or third-party services that ensure our anonymity and peace of mind. At the end of this article, we offer you our solution with the aim of providing you with the utmost privacy and anonymity. Disclaimer: The instructions contained in this article are presented with the intent of providing anonymity to the reader. Jaymon Security is not responsible for …
What can happen if our social media accounts, email, or other applications are stolen from us?
social media email stolen …
Actions to be taken in case of hijacking or loss of GMAIL account credentials
1. Introduction The purpose of this article is to provide recommended steps to recover a GMAIL account that may have been lost or hijacked. Although the instructions have been checked, it should be noted that ultimately the recovery or not of the account depends on the criteria or criteria of the people at Gmail who evaluate the request and the evidence provided. This means that despite following each step correctly, it is possible that the recovery request will be rejected. 2. Steps for Gmail account recovery 2.1. Factors that can facilitate recovery As indicated in the introduction, the decision to …
Securing our devices against potential espionage.
1. Introduction In this article, we will provide guidelines on how to proceed in the event that we believe or suspect that any of our devices (computer or smartphone) are compromised, meaning that unauthorized individuals have unrestricted access to the device. The goal of this article is not to show the reader how to detect if their devices or accounts have been compromised (compromised by trojans) by third parties. Broadly speaking, there are certain signs that may lead us to suspect that something unusual is happening. Instances where the battery life of our smartphone suddenly becomes much shorter than usual, …
What should we do if we become victims of ransomware?
1. What is ransomware and what impact does it have? In this article, we will explore how to proceed in the event that our systems have been compromised by ransomware, something that has become quite common in recent times. Ransomware is defined as a type of malicious program (malware) that encrypts the computer data of infected machines and demands a ransom payment, usually in cryptocurrencies (Bitcoin, Monero, etc.), in exchange for removing this restriction and restoring data access to the victim. A ransomware attack can result in significant financial losses for companies. If they don’t have recovery plans in place …
Latest News
