Tesh Empire Cyber lab

14/09/2026

Build a real port scanner in Python from scratch. 🐍
Step by step: imports and setup, the scan function, multithreading for speed, and tying it all together into a working tool that checks 1024 ports in under a second. Full script included, plus ideas to extend it further.
Swipe through and follow along.
⚠️ Only scan systems you own or have explicit permission to test.

29/08/2026

Enter SharePoint as ANY user. No account needed. 🚨
CVE-2026-55040 (CVSS 9.1) a JWT authentication bypass that lets attackers forge a token SharePoint accepts as fully legitimate, impersonating any user including admin. Discovered partly through AI-assisted research at Pwn2Own Berlin, patched quietly in July, then exploited within hours of the public writeup dropping in August.
Affects on-prem SharePoint only Server Subscription Edition, 2019, and 2016. SharePoint Online was never at risk.
Patch is already out. If you're running on-prem SharePoint, check your version now.

27/08/2026

23/08/2026

The OWASP Top 10 just got its first update since 2021. ⚠️
Two brand-new categories made the list — Software Supply Chain Failures and Mishandling of Exceptional Conditions. This breaks down all 10 risks: what each one is, a real example, and how to actually prevent it.
Swipe through and save it — this is the list every developer and security pro should know cold.

12/08/2026

Know your target. Scan smart. 🎯
Nikto is a powerful open-source web server scanner that checks for thousands of known vulnerabilities, misconfigurations, and dangerous files in one run. This covers the full workflow basic scanning, proxying, evasion, plugins, and reporting.
Swipe through and save it for reference.
⚠️ For authorized testing and educational purposes only.

08/08/2026

The complete Wi-Fi security suite, fully broken down. 📶🔓
Aircrack-ng covers the full wireless testing workflow monitor mode, network scanning, targeted capture, deauth attacks, handshake cracking, fake authentication, rogue access points, and wordlist management.
Swipe through and save it for reference.
⚠️ For authorized testing and educational purposes only.

06/08/2026

Automated SQL injection, fully broken down. 💉
SQLMap doesn't find the injection point for you but once it has one, it can enumerate databases, tables, columns, and dump data automatically. This covers the full workflow from basic scan to full extraction.
Swipe through and save it for reference.
⚠️ For authorized testing and educational purposes only.

04/08/2026

Harden your Linux box before someone else finds the gap. 🛡️
User & access control, SSH hardening, firewall configuration, file permissions, patch management, logging, service hardening, and file integrity monitoring — the full defensive checklist in one place.
Swipe through and audit your own server against it.

03/08/2026

The world's fastest password cracker, fully broken down. ⚡🔓
Hashcat leans on your GPU instead of your CPU that's what makes it dramatically faster than traditional cracking tools. This covers basic usage, hash identification, attack modes, mask attacks, rule-based cracking, performance benchmarking, sessions, and output handling.
Swipe through and save it for reference.
⚠️ For authorized testing and educational purposes only.

01/08/2026

cybersecurity myths that need to die. 🛡️
"I'm not a target," "antivirus is enough," "the padlock icon means it's safe" — bad security advice spreads faster than good advice ever does. Swipe through and see what's actually true.