Articles

From Morocco to Lebanon: How I Infiltrated a Live WhatsApp Hacking Operation and Found the People Behind It

April 19, 2026 • 9 min read • Blue Teaming

From Morocco to Lebanon: How I Infiltrated a Live WhatsApp Hacking Operation and Found the People Behind It

Inside the Telegram bot of a group stealing Lebanese WhatsApp accounts, and the trail of mistakes that revealed who they are.

DKIM Replay Attacks Are Back: The Email Security Threat Bypassing All Your Defenses

February 21, 2026 • 15 min read • Blue Teaming

DKIM Replay Attacks Are Back: The Email Security Threat Bypassing All Your Defenses

Discover How Cybercriminals Weaponize Authenticated Emails and Learn to Secure Your Organization Against This Threat

Clever DNS Security Trick: The 0x20 Encoding Story

December 19, 2025 • 11 min read • Blue Teaming

Clever DNS Security Trick: The 0x20 Encoding Story

The Story of How Random Capitalization Saved the Internet from Total Chaos

DNS NULL Records: The Hidden Data Transfer Method

December 4, 2025 • 17 min read • Red Teaming

DNS NULL Records: The Hidden Data Transfer Method

Converting Your DNS Server into a File and Data Server with a Hidden Record

Digital Lebanon at Risk: Massive DMARC Security Gaps Discovered

August 9, 2025 • 5 min read • Red Teaming

Digital Lebanon at Risk: Massive DMARC Security Gaps Discovered

Spoofing Email by Hacking Misconfigurations in DMARC Records

Leak-Proof Authentication: The Fingerprint Revolution in JWT Security

July 24, 2025 • 5 min read • Blue Teaming

Leak-Proof Authentication: The Fingerprint Revolution in JWT Security

What If Your Authentication Tokens Could Detect When They’ve Been Stolen?

Azure VM Hacked? Time to Raid IMDS for All It’s Worth!

May 5, 2025 • 4 min read • Red Teaming

Azure VM Hacked? Time to Raid IMDS for All It’s Worth!

IMDS Enumeration Is Often Overlooked but Is an Essential Step in Azure Post-Exploitation

Follow me

If it's about cybersecurity, you’ll find me at the center of it.