https://cyberah-blog.pages.dev/en/Recent content on CyberahHugoen2026 CyberahThu, 23 Apr 2026 00:00:00 +0000https://cyberah-blog.pages.dev/en/cve/cve-2026-40484/Tue, 21 Apr 2026 00:00:00 +0000https://cyberah-blog.pages.dev/en/cve/cve-2026-40484/A deep technical analysis of how I found this vulnerability from scratch all the way to receiving the CVE ID.https://cyberah-blog.pages.dev/en/notes/active-directory/what-is-ad/Mon, 20 Apr 2026 00:00:00 +0000https://cyberah-blog.pages.dev/en/notes/active-directory/what-is-ad/Introduction to Active Directory structure and authentication protocolshttps://cyberah-blog.pages.dev/en/notes/active-directory/ad-attacks/Mon, 20 Apr 2026 00:00:00 +0000https://cyberah-blog.pages.dev/en/notes/active-directory/ad-attacks/The most common Active Directory attacks used in red team engagementshttps://cyberah-blog.pages.dev/en/notes/active-directory/lateral-movement/Mon, 20 Apr 2026 00:00:00 +0000https://cyberah-blog.pages.dev/en/notes/active-directory/lateral-movement/Lateral movement techniques for pivoting between machines in Active Directory environmentshttps://cyberah-blog.pages.dev/en/notes/active-directory/bloodhound/Mon, 20 Apr 2026 00:00:00 +0000https://cyberah-blog.pages.dev/en/notes/active-directory/bloodhound/Using BloodHound to discover shortest attack paths to Domain Adminhttps://cyberah-blog.pages.dev/en/stats/Thu, 23 Apr 2026 00:00:00 +0000https://cyberah-blog.pages.dev/en/stats/A comprehensive overview of Cyberah's content — articles, activity, and most-readhttps://cyberah-blog.pages.dev/en/hall-of-fame/Thu, 23 Apr 2026 00:00:00 +0000https://cyberah-blog.pages.dev/en/hall-of-fame/Contributors to Cyberah — ranked by number of articles publishedhttps://cyberah-blog.pages.dev/en/about/Tue, 21 Apr 2026 00:00:00 +0000https://cyberah-blog.pages.dev/en/about/Ayham Othman — Cyberah | Penetration Tester, Security Researcher, Trainer & Speakerhttps://cyberah-blog.pages.dev/en/cve/cve-2024-log4shell-analysis/Sun, 19 Apr 2026 00:00:00 +0000https://cyberah-blog.pages.dev/en/cve/cve-2024-log4shell-analysis/Deep technical analysis of JNDI Injection vulnerability patterns — discovery, exploitation, and defensehttps://cyberah-blog.pages.dev/en/privacy/Sun, 19 Apr 2026 00:00:00 +0000https://cyberah-blog.pages.dev/en/privacy/Cyberah blog privacy policyhttps://cyberah-blog.pages.dev/en/programming/python-for-hackers/Sun, 19 Apr 2026 00:00:00 +0000https://cyberah-blog.pages.dev/en/programming/python-for-hackers/A practical guide to learning Python from a cybersecurity perspective — writing recon tools, scanners, and exploitation scriptshttps://cyberah-blog.pages.dev/en/terms/Sun, 19 Apr 2026 00:00:00 +0000https://cyberah-blog.pages.dev/en/terms/Cyberah blog terms of usehttps://cyberah-blog.pages.dev/en/tools/nmap-complete-guide/Sun, 19 Apr 2026 00:00:00 +0000https://cyberah-blog.pages.dev/en/tools/nmap-complete-guide/Everything you need to know about Nmap: basic scanning, NSE scripts, firewall evasion, and advanced techniqueshttps://cyberah-blog.pages.dev/en/writeups/thm/thm-startup/Sun, 19 Apr 2026 00:00:00 +0000https://cyberah-blog.pages.dev/en/writeups/thm/thm-startup/Detailed walkthrough for TryHackMe Startup room — FTP Anonymous, RCE via File Upload, Privilege Escalation via Cronhttps://cyberah-blog.pages.dev/en/notes/methodology-web-pentest/Sun, 19 Apr 2026 00:00:00 +0000https://cyberah-blog.pages.dev/en/notes/methodology-web-pentest/A comprehensive methodological guide for web application penetration testing, from reconnaissance to final report