KavLabs
HomeBlogSupport
KavLabs
HomeBlog
Support
KavLabs

Notes from exploratory minds, for curious minds

Parham·Parham·Zal·Zal·
· · · · · · · · · · · · · · · · · · · · · · · · · · · · · · · · · · · · · · · · · · · · · · · · · · · · · ·
BlogCategoriesAdvanced Searchchangelog

©2026 KavLabs — all rights reserved

made with love by Parham and Zal

Feb 24, 2026KavLabs · guideLanguage: English
12 min read

Introduction & Complete Guide to KavLabs

Digital LiteracyParhamF

Everything about KavLabs: Why it was created, the path it follows, what content it offers, and how you can learn step-by-step from digital literacy to advanced cybersecurity techniques.

Introduction & Complete Guide to KavLabs
KavLabsguidecybersecuritydigital literacysecurity educationopen source

Introduction

Hello! If you’re here, it means you’re either concerned about your digital security, or you want to dive into the exciting world of cybersecurity, or maybe you’re already an ethical hacker looking for new content. Well, the good news is you’ve come to the right place — welcome!

Let’s scare you a little: when was the last time your personal information was leaked from an online service? You might not have even noticed. According to 2024 statistics, more than 33 billion data records were stolen worldwide. The situation in Iran is no better — from leaks of user data from popular apps to ransomware attacks on organizations, it all shows that cybersecurity is no longer optional; it’s a necessity.

We’re currently a two-person team who got tired of Persian resources being either outdated, superficial, or never explaining how to actually do things. Fortunately, besides us, there are other groups out there doing good work and helping out. Our goal is the same: we’re trying to build educational equity and accessible, hassle-free resources — for both Persian and English speakers.

If you’re reading the English version right now, you might be thinking: “Well, I don’t have a problem, do I?” And you’re right — it’s easier for you. But free, high-quality resources are still scarce or very scattered, and more importantly, they may not be beginner-friendly. Our goal is: why don’t we build a space that contains everything we wished we’d had when we started? A simple space with deep content, no unnecessary complexity, and as straightforward as possible.

I hope this space proves useful to you.


Our Story

Why did we start this blog? At first, this was supposed to be Zal’s personal website where they could occasionally publish content. But at Zal’s suggestion and my interest in content creation, it rebranded to Kavlabs. Kavlabs aims to build a platform for security education in both Persian and English, open-source and free of charge.

What problem are we trying to solve?

That’s an important question, and we could talk a lot about it. We’ve already touched on some points, but let me put it broadly: in the security learning community, both in Persian and English, there are many issues — and if you’ve tried learning, you already know them.

For example, in Persian, we lack resources, though in recent years many people, like us, have begun trying to produce content. It’s similar in English. The next issue is cost — most courses can be very expensive, but we want to provide content for free here, and eventually at a very reasonable, minimal cost (I’ll explain later).

Why us, anyway?

Perhaps it’s the simple language and the well-organized content. Here, we try to create and publish content at every skill level.

What community do we want to serve?

This is the turning point of the story. Our goal is to help different segments of the community by publishing content at various levels — from an ordinary user to a professional hacker. The only thing you need is a bit of curiosity and a passion for learning.

If you found your way here on your own, you’re already curious enough. If a friend or someone else sent this to you, know that you have the potential. If you’ve seen us somewhere else — still, you’re curious. Ultimately, your presence here is a sign of your curiosity and how special you are. Congratulations!

Everyone can learn. With tags, categories, and roadmaps, you can have a complete path tailored to your learning needs.

How do we see the future of the blog?

I’d rather say the future of Kavlabs will be more than just a blog. The day will come when we’ll have an academy with challenges and even online courses — a complete resource for learning at every level.

What’s in it for you?

Anyone skeptical will ask this question, and that’s a very good thing. Whenever you see a free product, be sure to ask.

Our profit is you. I know it sounds cliché, but let me explain: you become a community for us, you become a friend, and then you help us earn credibility — and that credibility can lead to great career opportunities. But I want to be honest: that’s not the only goal. We’ve always dreamed of creating content and helping people, and this is the start of that journey.

In these tough economic times, especially in Iran and other parts of the world, no one wants to spend a lot of money — and that’s precisely our goal. One day the academy will be built and so on, and we’ll have to invest a lot of time in the site regardless — obviously, that comes with costs. So you might ask: where will the money come from?

Again, we’re counting on you: financial support, supporting us on social media, or even, when the academy arrives, if you like, you can use our services. The academy’s goal is to be as low-cost as possible and only charge what needs to be covered.

When we write an article, it takes a chunk of our time once, so it’s no problem. But running online courses or training programs that require constant updates and a significant time investment might involve a fee — though certainly no astronomical figure. Still, a considerable part of the academy will remain free and will need your support to stay alive. The cost of another part of the academy is its infrastructure, which I’ll fully address in the academy introduction article.

If this site earns any income, 5 to 10 percent will be donated directly to charity.


Our Content

Our content is divided into four main categories on the site:

1. Digital Literacy

This can be for everyone — truly everyone. In this category, we’ll talk about how this digital space works: from the internet to IP and so on. Or we’ll cover how to stay safe online, what things are dangerous, or the risks that exist online and explain them, such as phishing. The overall goal is to raise general knowledge — which I think everyone should know.

2. Security Fundamentals

Here we get a bit more technical. Again, everyone can read it, but not everyone may be curious. We’ll talk about encryption and more detailed security topics — for instance, what exactly is SQL injection? In general, everyone can learn and raise their level of understanding.

3. Attack Techniques

This is where things get specialized. To understand this section, you’ll need to learn the relevant security fundamentals (not hard — we’ll teach you beforehand with other articles). Here we dive right in — for example, how to ethically break into systems and topics that are important to know for becoming a professional.

4. Challenge & Lab Write-ups

Here the approach changes. The audience for this education is much smaller, but you’re still our target. You might try to solve a challenge on some site and fail, or just not grasp it. That’s where we come in — Zal will fully solve challenges for you here. But you can also see just the answer and a high-level overview in my GitHub repository.


Site Features

Alright, after you’ve found an article, what does our blog have that you rarely see elsewhere? Let’s go through them one by one:

1. Callouts — Smart Colored Boxes

In our articles, we highlight important information with colored boxes, each serving a specific purpose:

Note

Note: For extra, side information that’s good to know. These boxes are usually used for small tips or supplementary info not directly related to the main topic but can help with better understanding.

Pro Tip

Pro Tip: Tricks and solutions that professionals use. These are shortcuts, best practices, or practical techniques that make your learning faster and more efficient.

Warning

Warning: Things you should pay attention to. These boxes are used when an action could have unintended consequences or should be done carefully — for example, it might cause data loss or system issues.

Danger

Danger: Serious warnings to prevent catastrophic mistakes. This is the highest level of alert and is used when a mistake could cause severe damage to systems, data, or even legal issues. Make sure to take these seriously!

Info

Info: General explanations and basic concepts. These boxes give context, simple definitions, or background information to help you better understand the topic.

Legal

Legal Note: Important legal and ethical matters. Whenever a technique or tool may have legal consequences, these boxes inform you of the relevant laws and regulations. Adhering to these is essential for ethical and legal activity.

AI Assisted

AI Assisted: Sections researched or written with the help of AI. We believe in transparency, so wherever we’ve used AI tools for research, editing, or content generation, we honestly declare it.


2. Interactive Glossary

One of Kavlabs’ special features is its comprehensive glossary of security terms. When you see a technical term in an article, you can easily click on it and understand its meaning.

Practical examples:

When we talk about web vulnerabilities, you might encounter terms like or . Just click on any of them to:

  • See a short definition instantly
  • Go to the dedicated page for that term for more detailed explanations
  • Check practical examples and sample code
  • Discover related terms

Our glossary is divided into three levels: Beginner, Intermediate, and Advanced — so you can learn according to your current knowledge.

Advanced Glossary Search: You can search by level, category, or keyword and quickly find the term you need. All terms are alphabetically ordered, and with multiple filters you can pinpoint exactly what you’re looking for.

We’ve named the glossary page “Anatomy of Security,” which you can see in the site navigation.


3. Professional Code Blocks

Our code is displayed with the following features:

  • Syntax Highlighting: Readable and beautiful code
  • Line Numbers: For precise reference
  • Highlighting Important Lines: Key lines are emphasized
  • Copy Button: One click copies the entire code
  • Language Display: Python, Bash, JavaScript, etc.
  • Light/Dark Theme: Code harmonizes with the site theme

Here’s a simple example:

python
1print("hello from kavlabs code block")

4. Advanced Search

Our search system is more than just a simple box:

  • Instant Search: Results appear as you type
  • Filter by Category: Digital Literacy, Security Fundamentals, Attack Techniques, Challenge & Lab
  • Filter by Tag: Find articles on a specific topic
  • Filter by Author: Articles by Parham or Zal
  • Sorting: Newest, oldest, or by relevance
  • Quick Site Search: Use a keyboard shortcut to search from anywhere on the site

5. Smart Categorization and Tagging

Categories: Every article belongs to one main category:

  • Digital Literacy
  • Security Fundamentals
  • Attack Techniques
  • Challenge & Lab

Tags: Each article can have multiple tags (e.g., XSS, JavaScript, OWASP Top 10, Penetration Testing). You can use tags on the search page or visit the tags page.


6. Interactive Table of Contents

Every article has a table of contents that:

  • Overview: With one glance, understand what the article is about
  • Quick Jump: Click and go directly to the desired section
  • Current Position: Shows where you are in the article
  • Sticky Navigation: Always accessible, even when you scroll

7. Post Navigation

At the end of each article:

  • You’ll see the previous and next article
  • Continue reading without returning to the article list
  • Related suggestions based on category

8. Dedicated Author Pages

Each author has a personal page with:

  • Biography and expertise
  • List of all their articles
  • Social media links
  • Custom backgrounds and unique design

You can visit the Authors page.


9. Full Bilingual Support

Kavlabs is fully written in both Persian and English:

  • Dedicated Content: Each language has its own content (generally, articles are written in Persian and then translated into English with the help of AI, but the translation is reviewed to improve it)
  • Quick Switching: Language switch button at the top of the page
  • Separate URLs: Each language has its own path
  • Right-to-Left/Left-to-Right: Fully responsive design for both languages

10. Additional Features

  • Back to Top Button: For long articles
  • Article Sharing: Easily share articles on social media
  • Reading Time: Know how many minutes it takes to read
  • Published and Updated Dates: See how fresh the article is
  • RSS Feed: Follow new articles in your RSS reader
  • Changelog Page: See what changes have happened on the site

11. Future Features (In Development)

We’re working on these — they will generally be available on the academy subdomain, but we won’t forget about Kavlabs:

  • Online Academy with interactive courses
  • Challenge Platform (CTF) for hands-on practice
  • Forum and Discussion Space for exchanging ideas
  • Consultation System for personal guidance
  • Personalized Learning Roadmaps
  • Free Certificates after completing courses

Wrap-Up: Your Journey Starts Here

Now that you’ve made it this far, you know what Kavlabs is, what it wants to build, and how it can help you. But the most important question remains: Are you ready?

The world of cybersecurity is infinitely vast — sometimes it can seem scary or impossible. But remember: everyone who is a professional in this field today once started from exactly where you are now. They didn’t know what an IP was, how XSS works, and they were afraid of the Terminal.

The difference between someone who succeeds and someone who doesn’t is just one thing: persistence and curiosity.

You proved your curiosity by reaching Kavlabs. Now all you need to do is keep that curiosity going. Read an article, solve a challenge, learn a new concept. Step by step, day by day, you are becoming someone who can stay safe, secure systems, find vulnerabilities, and protect the digital world.

We’re here to be by your side every step of the way. Ask any questions you have, tell us about any problems, and share every success with us. You are part of the Kavlabs community — a community that supports each other, teaches each other, and grows together.

So what do you say? Ready to start this journey?

Welcome to Kavlabs. Let’s become safer and smarter together. 🚀

Info

Zal and I wanted to end by thanking our families and friends, especially Autotroph, Dark Chocolate, and Arshia, who helped build this collection with their ideas and support, and all the other friends who backed us.


Get in touch with us:

  • 💬 Telegram: @kavlabs_official

First step: Start from the Blog page and read your first article


If this article was useful to you, share it with your friends and colleagues 💚

PreviousMake the Server Do Your Dirty Work — What is SSRF?

Related posts

Make the Server Do Your Dirty Work — What is SSRF?Security Fundamentals
Feb 26, 2026·19 min read

Make the Server Do Your Dirty Work — What is SSRF?

SSRF is one of the most dangerous vulnerabilities in the cloud world. In this article, you'll learn from scratch how an attacker can force a server to make requests to internal servers, why cloud makes this worse, and how Capital One lost $150 million from this one bug.

ParhamFParhamF
·
SSRFweb security+4
Read more

On this page