Burp Suite Tutorial: Your First Intercept to First Finding
A hands-on Burp Suite walkthrough: install it, intercept traffic, replay requests in Repeater, and turn one IDOR into a verified finding.
Dominion Cyber
Cybersecurity Articles & Insights
Practical security guides, threat deep-dives and hands-on how-tos for defenders, engineers and the security-curious.
Latest articles
81 articles
API Penetration Testing: A Practical Guide and Checklist
A practical, repeatable method for penetration testing REST, GraphQL and gRPC APIs — endpoint inventory, identity matrices, authorization testing, and fixes that hold.
OSINT Tools for Penetration Testing: A Practical Hub
A practical hub for OSINT tooling in penetration testing: which tool fits which reconnaissance phase, how to scope it lawfully, and what defenders should fix.
Patch Management Software Compared: A Practical Buyer’s Guide
Five classes of patch management software compared on coverage, reboots, reporting, and cost, plus a default pick and the conditions that would change it.
Ransomware Response Playbook: A Copy-Paste Template
A fill-in-the-blanks ransomware response playbook you can copy, adapt, and test, plus guidance on what to change for your environment.
Incident Response Retainer Explained: What You Are Paying For
An incident response retainer is a pre-paid agreement that reserves expert help, pre-negotiated terms, and a faster path to containment before a breach happens.
Velociraptor vs osquery vs GRR: Which One Should You Deploy?
A practical comparison of Velociraptor, osquery, and GRR for endpoint visibility and incident response, with a clear recommendation and a decision checklist.
Security for SMBs: What It Is and How to Do It Right
Security for SMBs means closing the few attack paths that actually hit small businesses, from stolen credentials to untested backups, with controls sized to your budget.
Cybersecurity Case Studies: What They Prove and How to Use Them
A cybersecurity case study is evidence, not marketing. Here is how they are built, how to read one critically, and how to publish your own.
Defending AI Assistants from Malicious Browser Extensions
A single browser extension hijacked built-in AI assistants in Chrome, Edge, Comet, Opera Neon, and Claude. Here's how to audit extensions and lock down agentic browser…