Blog — Aryan Pareek

STIG,NIST and ISO

Jan 14, 2026 • 12 min read • STIG Frameworks

The Holy Trinity of Not Getting Hacked (Or At Least Looking Like You Care)

Responsible Disclosure: SQL Injection (Sanitized)

Nov 8, 2025 • 6 min read • Web Security SQLi

A vendor-safe case study of a discovered SQL Injection in a public endpoint. This post contains sanitized PoC notes, safe reproduction steps for developers, and remediation guidance using prepared statements. Screenshots are redacted for privacy.

Read Full Blog →

Starter Toolkit for Web App Pentesting (2025)

Nov 3, 2025 • 5 min read • Toolkit OWASP

A compact, high-efficiency toolkit for real engagements: Burp Suite, nmap, gobuster, Nikto, and custom Bash scripts for recon. I explain when to use each and provide quick config tips.

Read Full Blog →

What are Botnets

Nov 20, 2025 • 12 min read • Botnet DDOS

Bots or zombies? A simple explanation of how botnets work and how attackers use them.

Read Full Blog →

Underrated-tools

Dec 24, 2025 • 13 min read • Tools HIDS

Look, we all know about Metasploit, Burp Suite, and Nmap. They're the "popular kids" of the cybersecurity world—everyone talks about them, everyone uses them, and honestly? They get all the attention they deserve. But here's the thing: the real gems are hiding in plain sight, gathering dust in GitHub repositories while everyone's busy flexing their Kali Linux boxes

Read Full Blog →