SysAlbania
CyberSecurity
SysAlbania is a cyber security education platform and services team. We publish hands-on guides to penetration testing, bug bounty, red teaming and threat hunting, maintain a library of free open-source security tooling, and track newly disclosed vulnerabilities. Everything we publish is written from our own testing: our own screenshots, our own command output, our own lab work. Alongside the free content we carry out paid security assessments for clients, and what we learn doing that work is what ends up here. All content is published for education and for authorised testing only.
Articles by SysAlbania
19 articles
Hacking ToolsUnderstanding what Threat, Vulnerability, Risk, Impact, Severity, and assesing Severity based on CVSS
A threat is anything that has the potential to do damage, even if the damage has not happened yet. In this case, a thief who walks around looking for houses to break into is the threat. The thief might or might not attack, but the possibility exists, and that possibility itself is the threat.
Latest TutorialsUnderstanding What IP, Port, and Protocol Is
This topic focuses on understanding the definitions of IP addresses, ports, and protocols, the differences between each of them, as well as commonly used standard ports and the network services that operate on those ports.
LinuxActive Information Gathering in Cybersecurity
In cybersecurity, the first phase of ethical hacking is called Reconnaissance or Information Gathering. This phase focuses on collecting information about a target before attempting any attack or security testing. Information gathering is divided into two main types: Passive Information Gathering Active Information Gathering
ExploitsCaptcha Bypass
Do not send the parameter related to the captcha. Check if the value of the captcha is in the source code of the page. Change some specific characters of the captcha parameter and see if it is possible to. When a new Captcha code is created, the previous code will expire.
Latest TutorialsNetwork Mapping for Beginners: Exploring Networks with Nmap
Network mapping is an early stage in network analysis, cybersecurity, and penetration testing activities. At this stage, the main objective is not to exploit vulnerabilities, but to understand the structure of the network. We want to know what devices exist, which hosts are active, and how the network is organized.
GatheringA Beginner’s Guide to Port Scanning Using Nmap
After identifying active hosts through network mapping, the next step is port scanning. Port scanning aims to determine which network services are running on each host.
LinuxUnderstanding Service Enumeration in Cybersecurity
Service enumeration is an essential stage in ethical hacking and penetration testing. It is performed after the initial information gathering and scanning phases.
GatheringInformation Gathering in Cybersecurity
What is Information Gathering Information gathering is an important early step in cybersecurity and ethical hacking. It is the process of collecting and organizing information about a target system before performing deeper security testing.
ExploitsEternalBlue Exploit Analysis – Runbook
This runbook details a hands-on simulation of exploiting the EternalBlue vulnerability (CVE-2017-0144), targeting an unpatched Windows 7 machine in a controlled lab environment using Metasploit.