Projects
Hey everyone — 404Yeti here, back from the Icebox ❄️ Today I want to share a project I built called RedFlag, a purposely vulnerable web app that’s small in size but massive in security training value. Whether you’re learning web hacking, prepping for CTFs, or brushing up on your Redis
Projects
Hey everyone, Yeti here 🐾 As part of my journey into deeper AppSec, I wanted to build something that combines everything I’ve been learning: APIs, real-time backend behavior, front-end vulns, and secure(ish) architecture — then rip it all wide open. So I built DVCA – Damn Vulnerable Chat App An intentionally
webapp
Hey everyone, 404Yeti back in the Icebox! ❄️ Today is Day 3 of the Postman 30 Day Challenge, and we’re diving into something that may sound simple — but it’s a game-changer for productivity and security: Organizing and enriching your requests with folders, variables, and metadata. This is the kind
webapp
“Make your API testing life easier, one variable at a time.” – 404Yeti Hey snow crew, Yeti here! ❄️ Today’s mission in the Postman 30 Day Challenge is all about reducing chaos and leveling up your workflow using environments and variables. Let’s face it — if you're copy-pasting full
webapp
Hey everyone, 404Yeti here! I’ve officially kicked off the Postman 30 Day Challenge to level up my API testing skills — not just for development, but for security. Why? Because APIs are everywhere — and securing them is one of the most underrated but critical skills in modern pentesting. There’s
Projects
Hey snow crew! ❄️ 404Yeti here, and today we’re grinding some beans and processing some streams — Kafka streams, that is. Ever wonder what happens when you mix caffeine, microservices, and Go? You get a blazingly efficient, message-driven coffee ordering system, fueled by Flippers, Go routines, and far too much Cold
Projects
Hey snow squad, Yeti here! 👋 Today I’m thawing out my very first backend project — a complete gRPC microservice built with Go, powered by curiosity, caffeine, and just a pinch of chaos. Let’s walk through why I built it, what I learned, and why it matters (especially if you
Sec Notes
Hey everyone, welcome back to the Icebox! I’m your frosty host, 404Yeti, and today we’re diving into the chilly world of Bluetooth Low Energy (BLE) spam attacks — what they are, why they’re a big deal, and how to defend yourself. Buckle up, snow troopers. This one’s
OSINT
Hey there, snow pals! 🐾 Welcome back to another cozy-cold OSINT exercise with your favorite digital Yeti. Today we’re diving into the frosty world of Hacktoria — a newer OSINT platform that’s got me abominably excited! Let’s fire up our browsers and warm our brains, because this one’s
OSINT
So today I am working on a new BellingCat Challenge provided by Gralhix! I am super excited about this challenge because its a collab between two well known entities! So lets dive in. 🎯 The Mission: Locate the original video footage of an interview using only an image as our starting
Malware
🗂️ Overview ❄️ “If it looks like an updater and snitches like a RAT, it’s not your friend.” * File Name: Updater.exe * Type: InfoStealer * SHA256: cbdfe04b8f754e5e6150936ee604f0a478b79c6d0466ee155775ead575adea90 * File Type: Windows PE32 executable * Size: 20.29 KB – small, like a cyber flea with bad intentions * First Seen: 2025-01-07 16:00 UTC 🔍 Basic Static
📅 Event Overview * Event: Trace Labs Global OSINT Search Party CTF * Date: April 19, 2025 * Duration: 4 Hours * Team Name: ByteRaiders * Role: Investigator 🎯 Mission Objective Trace Labs hosts a one-of-a-kind OSINT Capture The Flag, where hackers don’t pwn machines—they try to help find real missing persons using open-source intelligence