# Insecure Lab Insecure Lab is an educational cybersecurity and ethical hacking learning portal by Pashyaa Technologies. Primary site: https://www.insecure.in/ Sitemaps: https://www.insecure.in/sitemap.xml https://www.insecure.in/sitemap-blog.xml ## Cybersecurity & Ethical Hacking - Ethical Hacking Roadmap: https://www.insecure.in/ethical-hacking - Cyber Security Career Guide: https://www.insecure.in/cybersecurity-career - Penetration Testing: https://www.insecure.in/penetration-testing - White Hat Hacker: https://www.insecure.in/white-hat-hacker - White Hat vs Black Hat Hacker: https://www.insecure.in/blog/white-hat-hacker-vs-black-hat-hacker - White Teaming in Cyber Security: https://www.insecure.in/blog/white-teaming-in-cyber-security - Five Phases of Ethical Hacking: https://www.insecure.in/blog/five-phases-of-ethical-hacking - Active and Passive Attacks: https://www.insecure.in/active-and-passive-attacks - Cyber Security Tips for Employees: https://www.insecure.in/blog/cyber-security-tips-for-employees - Whitelist vs Blacklist: https://www.insecure.in/blog/whitelist-vs-blacklist - About Insecure Lab: https://www.insecure.in/about - Blog: https://www.insecure.in/blog ## AI Security The AI Security section focuses on defensive AI, LLM application security, prompt injection, RAG security, AI agents, data leakage, and safe security checklists. - AI Security Roadmap: https://www.insecure.in/ai-security - LLM Security: https://www.insecure.in/llm-security - Prompt Injection: https://www.insecure.in/prompt-injection - OWASP LLM Top 10: https://www.insecure.in/owasp-llm-top-10 - RAG Security: https://www.insecure.in/rag-security - AI Agent Security: https://www.insecure.in/ai-agent-security - MCP Security: https://www.insecure.in/mcp-security - MCP Tool Poisoning: https://www.insecure.in/mcp-tool-poisoning - OWASP Agentic Applications Top 10: https://www.insecure.in/owasp-agentic-applications-top-10 - Indirect Prompt Injection in AI Agents: https://www.insecure.in/blog/indirect-prompt-injection-ai-agents - ChatGPT Hacks: https://www.insecure.in/blog/chatgpt-hacks - Anthropic Mythos and Project Glasswing: https://www.insecure.in/blog/anthropic-mythos-project-glasswing - OWASP Smart Contract Top 10 2025: https://www.insecure.in/blog/owasp-smart-contract-top-10-2025 ## Web & Application Security - Cross-Site Scripting: https://www.insecure.in/xss-attack - SQL Injection: https://www.insecure.in/sql-injection-attack - XXE Attack: https://www.insecure.in/xxe-attack - Directory Traversal: https://www.insecure.in/directory-traversal-attack - Parameter Tampering: https://www.insecure.in/parameter-tampering - Clickjacking: https://www.insecure.in/clickjacking - Clickjack Protection: https://www.insecure.in/blog/clickjack-protection-for-customer-visualforce-pages - Formjacking: https://www.insecure.in/formjacking - Input Validation: https://www.insecure.in/input-validation-attacks - Session Hijacking: https://www.insecure.in/session-hijacking - CRLF Injection: https://www.insecure.in/crlf-injection-attack - Second Order SQL Injection: https://www.insecure.in/blog/second-order-sql-injection - SSRF vs CSRF: https://www.insecure.in/blog/ssrf-vs-csrf - Broken Object Level Authorization: https://www.insecure.in/blog/broken-object-level-authorization - SAST and DAST: https://www.insecure.in/blog/sast-and-dast - XSS vs CSRF: https://www.insecure.in/blog/xss-vs-csrf - XSS vs SQL Injection: https://www.insecure.in/blog/cross-site-scripting-vs-sql-injection - Bobby Tables: https://www.insecure.in/blog/bobby-tables - HTML Smuggling: https://www.insecure.in/blog/html-smuggling - Cookie Tossing: https://www.insecure.in/blog/cookie-tossing - Magecart Attack: https://www.insecure.in/blog/magecart-attack ## Network & Infrastructure Security - Network Security Basics: https://www.insecure.in/network-hacking - Packet Sniffing: https://www.insecure.in/packet-sniffing - ARP Spoofing: https://www.insecure.in/arp-spoofing - IP Spoofing: https://www.insecure.in/ip-spoofing - DoS Attack: https://www.insecure.in/dos-attack - DDoS Attack: https://www.insecure.in/ddos-attack - Ping of Death: https://www.insecure.in/ping-of-death-attack - Reverse Shell Defense: https://www.insecure.in/reverse-shell-attack - Intrusion Detection System: https://www.insecure.in/intrusion-detection-system - Honeypot: https://www.insecure.in/honeypot - Intrusion Detection and Prevention in AWS: https://www.insecure.in/blog/intrusion-detection-and-prevention-in-aws - ARP Poisoning vs DNS Poisoning: https://www.insecure.in/blog/arp-poisoning-vs-dns-poisoning ## Identity & Email Security - Phishing: https://www.insecure.in/phishing - Email Spoofing: https://www.insecure.in/email-spoofing - Email Security: https://www.insecure.in/email-hacking - Social Engineering: https://www.insecure.in/social-engineering - Cognitive Hacking: https://www.insecure.in/cognitive-hacking - Trace an Email: https://www.insecure.in/blog/trace-an-email - Spear Phishing vs Whaling: https://www.insecure.in/blog/spear-phishing-vs-whaling - Credential Stuffing vs Password Spraying: https://www.insecure.in/blog/credential-stuffing-vs-password-spraying - Sidejacking: https://www.insecure.in/blog/sidejacking - Salami Attack: https://www.insecure.in/blog/salami-attack ## Password & Cryptography - Password Security: https://www.insecure.in/password-hacking - Brute Force Attack: https://www.insecure.in/brute-force-attack - Rainbow Table Attack: https://www.insecure.in/rainbow-table-attack - Privilege Escalation: https://www.insecure.in/privilege-escalation-attack - Cryptography: https://www.insecure.in/cryptography - Cryptography Cheat Sheet: https://www.insecure.in/cryptography-cheat-sheet - Steganography: https://www.insecure.in/steganography - Rainbow Table vs Dictionary Attack: https://www.insecure.in/blog/rainbow-table-vs-dictionary-attack - Image Steganography with S-Tools: https://www.insecure.in/blog/image-steganography-with-s-tools - POODLE Attack: https://www.insecure.in/blog/poodle-attack ## Malware & Forensics - Computer Virus: https://www.insecure.in/computer-virus - Trojan Horse: https://www.insecure.in/trojan-horse - Popular Trojans: https://www.insecure.in/popular-trojans - Ransomware: https://www.insecure.in/ransomware - Drive-By Download: https://www.insecure.in/drive-by-download-attack - Zero Day Attack: https://www.insecure.in/zero-day-attack - Data Anonymization: https://www.insecure.in/data-anonymization - Digital Forensics: https://www.insecure.in/digital-forensics - Shellbags Analysis: https://www.insecure.in/blog/shellbags-analysis - Tiny Banker Trojan: https://www.insecure.in/blog/tiny-banker-trojan - WannaCry Protection: https://www.insecure.in/blog/how-do-we-protect-ourselves-from-attacks-like-wannacry ## Wireless & Bluetooth Security - Wireless Security: https://www.insecure.in/wireless-hacking - Bluetooth Security: https://www.insecure.in/bluetooth-hacking - Bluetooth Hacking Tools: https://www.insecure.in/bluetooth-hacking-tools - Evil Twin Attack: https://www.insecure.in/evil-twin-attack - Bluejacking: https://www.insecure.in/bluejacking - Bluebugging: https://www.insecure.in/bluebugging-attack - Bluesnarfing vs Bluejacking: https://www.insecure.in/blog/bluesnarfing-vs-bluejacking - Bluetooth Hacked: https://www.insecure.in/blog/how-to-tell-if-your-bluetooth-is-hacked - Aircrack-ng: https://www.insecure.in/blog/how-to-use-aircrack-ng-in-kali-linux - PMKID Attack: https://www.insecure.in/blog/pmkid-attack ## Tools & Resources - Security Tools: https://www.insecure.in/security-tools - Password Entropy Calculator: https://www.insecure.in/tools/password-entropy-calculator - Ethical Hacking Tools: https://www.insecure.in/top-ethical-hacking-tools - Hacking Tools: https://www.insecure.in/hacking-tools - Google Dorks: https://www.insecure.in/google-dorks - Google Hacking: https://www.insecure.in/google-hacking - Hacking Books: https://www.insecure.in/hacking-books - Hacking Videos: https://www.insecure.in/hacking-videos ## Security Checklists - Security Checklists: https://www.insecure.in/checklists - LLM Security Checklist: https://www.insecure.in/checklists/llm-security-checklist - Security Headers Checklist: https://www.insecure.in/checklists/security-headers-checklist - OWASP Top 10 Checklist: https://www.insecure.in/checklists/owasp-top-10-checklist - Phishing Email Checklist: https://www.insecure.in/checklists/phishing-email-checklist - Cyber Insurance Checklist: https://www.insecure.in/blog/cyber-insurance-coverage-checklist - Data Loss Prevention Tips: https://www.insecure.in/blog/data-loss-prevention-tips ## Free Security Tools and Checklists - Security Tools & Checklists: https://www.insecure.in/security-tools - Security Checklists: https://www.insecure.in/checklists - Password Entropy Calculator: https://www.insecure.in/tools/password-entropy-calculator - LLM Security Checklist: https://www.insecure.in/checklists/llm-security-checklist - Security Headers Checklist: https://www.insecure.in/checklists/security-headers-checklist - OWASP Top 10 Checklist: https://www.insecure.in/checklists/owasp-top-10-checklist - Phishing Email Checklist: https://www.insecure.in/checklists/phishing-email-checklist ## Blog Topic Categories - AI Security Blog: https://www.insecure.in/blog/category/ai-security - Web Security Blog: https://www.insecure.in/blog/category/web-security - Network Security Blog: https://www.insecure.in/blog/category/network-security - Password Security Blog: https://www.insecure.in/blog/category/password-security - Malware & Threats Blog: https://www.insecure.in/blog/category/malware-threats - Digital Forensics Blog: https://www.insecure.in/blog/category/digital-forensics - Wireless Security Blog: https://www.insecure.in/blog/category/wireless-security - Ethical Hacking Blog: https://www.insecure.in/blog/category/ethical-hacking - Cyber Awareness Blog: https://www.insecure.in/blog/category/cyber-awareness - Security Tools Blog: https://www.insecure.in/blog/category/security-tools ## Blog - Blog Home: https://www.insecure.in/blog - Blog Sitemap: https://www.insecure.in/blog/sitemap - Recent AI Security Coverage: https://www.insecure.in/blog/indirect-prompt-injection-ai-agents - Anthropic Mythos and Project Glasswing: https://www.insecure.in/blog/anthropic-mythos-project-glasswing ## Trust and policy pages - About Insecure Lab: https://www.insecure.in/about - Editorial Policy: https://www.insecure.in/editorial-policy - Responsible Cybersecurity Use: https://www.insecure.in/disclaimer#responsible-cybersecurity-use - Contact: https://www.insecure.in/contact - Disclaimer: https://www.insecure.in/disclaimer - Terms of Use: https://www.insecure.in/terms-of-use - Privacy Policy: https://www.insecure.in/privacy-policy ## Content policy Insecure Lab publishes educational cybersecurity content for awareness, defensive learning, and authorized security testing. Security testing should be performed only on systems owned by the reader or where the reader has explicit permission. Content should not be used for unauthorized access, misuse, abuse, harm, or illegal activity. Content should not be used for unauthorized access, harm, abuse, or illegal activity. See the Editorial Policy and Responsible Cybersecurity Use sections for trust, review, and safety boundaries. ## Contact https://www.insecure.in/contact