Cybersecurity on Arsh Imtiaz

Why STRIDE Alone May Not Be Enough for AI Threat Modelling

Sun, 19 Jul 2026 00:00:00 +0100

The model may work as designed while the trust chain around it is compromised.">

The model may work as designed while the trust chain around it is compromised.

An AI assistant can follow every instruction it was given and still help an attacker compromise the organisation.

Learning ML by Building a Tiny Password Strength Classifier

Wed, 19 Nov 2025 00:00:00 +0000

I finally sat down and built a machine learning model in Jupyter Notebook that actually does something cybersecurity related. Not a big fancy neural network. Not a GPT clone. Just a tiny password strength classifier that helped me understand the full ML pipeline without frying my brain.

This whole thing started because I kept telling myself I would learn ML one day. And one day never comes when you wait for the perfect idea. So I forced myself to build something so stupid simple that I couldn’t run away from it.

When Red Teaming Meets Car Hacking: Building a Virtual Vehicle Pentest Lab on My Laptop

Sun, 09 Nov 2025 00:00:00 +0000

How does one emulate cars at home?">

How does one emulate cars at home?

Every car hacking tool I have come across required expensive ECUs, adapters or even full test benches. Having worked with test cars before, I got an insight into how time consuming and expensive, if not difficult it is to set a working HIL (Hardware-In-Loop) setup. I didn’t want to wait for hardware to understand how automotive networks behave - I wanted to simulate it.

Why Networking Fundamentals Should Be Your First Step

Wed, 06 Aug 2025 00:00:00 +0100

Networking is fun. Also, it is the part that keeps your hacks from breaking at the worst time.">

Networking is fun. Also, it is the part that keeps your hacks from breaking at the worst time.

So, you wanna be a hacker?

Cool. I did too. I jumped into Kali, sprayed tools, and followed tutorials like a robot. Things worked, but I could not explain why. That was my first big lesson: without networking, most of security looks like magic. No magic here. Just packets, addresses, ports, protocols and paths.

Docker to Detection: Setting Up Wazuh SIEM for Beginners

Sat, 14 Jun 2025 00:00:00 +0100

Setting up a SIEM (Security Information and Event Management) system might sound intimidating if you’re just getting started, but it’s a rewarding project that gives you real insight into how cybersecurity professionals monitor and detect threats. I recently built a Wazuh-based SIEM entirely with Docker and connected my personal Linux workstation as an agent. In this post, I’ll walk you through the process with practical commands for both Arch Linux and Debian users.

Welcome

Wed, 15 Jan 2025 11:59:12 +0300

Welcome to My Blog

Hello, and thank you for visiting my blog!

I’m Arsh Imtiaz — a cybersecurity professional passionate about ethical hacking, information security, and continuous learning in the ever-evolving world of technology.

About This Blog

This space is dedicated to sharing insights, experiences, and practical knowledge related to cybersecurity and ethical hacking. Here, you’ll find:

Technical write-ups and tutorials covering various tools, techniques, and challenges.
Personal reflections on projects, learning journeys, and industry trends.
CTF walkthroughs and writeups from platforms like TryHackMe and HackTheBox.
Occasional commentary on broader tech topics, aimed at both beginners and professionals.

Why I Created This Blog

I launched this blog to document my professional journey, share knowledge with the community, and foster connections with fellow security enthusiasts. Whether you’re just starting out or looking to deepen your skills, I hope you find something valuable here.