Explore The Hmmnm!!

Dive into cybersecurity, technology, and real-world experiences — all in one place.

🛡️ Explore our 33 security services →

Start Reading

HMMNM is an independent cybersecurity education and research practice led by Prabhu Kalyan Samal. We publish hands-on ethical hacking tutorials, detection engineering guides, weekly threat intelligence, and deep dives into the breaches that shaped the industry — so students, developers, and defenders learn security by studying how it really breaks.

Security

Exploitation techniques, vulnerabilities, and defense strategies

View All →

Software supply chain security showing interconnected dependency nodes in secure pipeline with shield protecting code repository

Software Supply Chain Security: Risks in Dependencies, Builds, and Secrets

A practical guide to software supply chain security covering dependency risks, secrets exposure, CI/CD trust failures, artifact integrity verification, SBOM...

Ransomware attack timeline showing major campaigns and payouts from 2016 to 2026

Ransomware Evolution 2016-2026: What Defenders Keep Missing

A decade analysis of ransomware evolution from 2016 to 2026, covering RaaS operations, double extortion, initial access brokers, living off...

Featured image for the SSTI deep dive covering template injection detection, exploitation, and prevention

Deep Dive into Server-Side Template Injection (SSTI)

A deep dive into Server-Side Template Injection (SSTI) — how template engines turn attacker input into RCE, with discovery, exploitation...

hmmnm.com — webapi card: a scanner beam sweeping an API endpoint list with vulnerable routes flagged amber (post: "Request Smuggling Explained: Detection and Mitigation in Depth")

Request Smuggling Explained: Detection and Mitigation in Depth

In-depth guide to HTTP request smuggling attacks. Learn how to exploit discrepancies between frontend proxies and backend servers in both...

10 Essential Tips for Aspiring Ethical Hackers

10 essential tips for aspiring ethical hackers. Build your cybersecurity career with practical advice on certifications, tool proficiency, lab environments,...

Abstract visualization of an autonomous AI agent network with attack paths highlighted

Agentic AI Security: Attack Surface in Autonomous Systems

A practical guide to agentic AI security covering goal hijacking, tool misuse, identity and privilege abuse, memory poisoning, multi-agent trust...

Identity security as the new perimeter concept showing user silhouettes with digital identity shields and authentication tokens in blue gradient

Identity Security: Modern Attacks on Users, Sessions & Trust

How identity became the new perimeter in modern cybersecurity. Explore MFA bypass techniques, OAuth consent phishing, device code attacks, token...

Overview of the complete XSS tutorial covering reflected, stored, and DOM-based cross-site scripting with defenses

Cross-Site Scripting (XSS): The Complete Tutorial

Complete cross-site scripting (XSS) tutorial covering stored, reflected, and DOM-based XSS with practical exploitation examples and prevention strategies including CSP.

hmmnm.com — webapi card: a scanner beam sweeping an API endpoint list with vulnerable routes flagged amber (post: "Error-Based SQL Injection: Exploitation & Mitigation")

Error-Based SQL Injection: Exploitation & Mitigation

Learn error-based exploitation techniques used by pentesters to extract sensitive data from vulnerable applications. Covers SQL injection, SSTI, and other...

Diagram of an API authorization flaw letting an attacker reach another user record

API Security: Authorization Flaws Behind Modern Breaches

A practical analysis of API security authorization flaws behind modern breaches. Covers BOLA, BFLA, IDOR, mass assignment, shadow APIs, and...

hmmnm.com — agent card: an AI agent node orchestrating tool calls, one poisoned call ringed in amber (post: "OWASP Top 10 for Agentic Applications 2026: Complete Security Guide")

OWASP Top 10 for Agentic Applications 2026: Complete Security Guide

The OWASP Top 10 for Agentic Applications defines the most critical security risks for autonomous AI agents in 2026. From...

hmmnm.com — agent card: an AI agent node orchestrating tool calls, one poisoned call ringed in amber (post: "Red Teaming LLM Applications: A Practical Playbook (2026)")

Red Teaming LLM Applications: A Practical Playbook (2026)

Red teaming LLM applications requires fundamentally different techniques than traditional penetration testing. This playbook covers the complete methodology: reconnaissance, attack...

💻