In this lab, we will investigate the security risks associated with misconfigured Large Language Models (LLMs). We will examine how prompt…

This room is aimed for beginner level hackers but anyone can try to hack this box. There are two main intended ways to root the box.

Linux memory analysis is an advanced but extremely powerful skill for hackers, red teamers, and incident responders. Many secrets never…

Complete walkthrough of Nitro, Bad Feedback, Triangle, and Ticket with detailed exploitation techniques

At this point in Advent of Cyber 2025, King Malhare’s chaos has moved fully into the cloud.

Learn the basics of AWS enumeration.

Enumerating IAM roles to access hidden S3 secrets safely in Advent of Cyber 2025 Day 23 room.

How to Arm Yourself with Cybersecurity Knowledge in 2025

Entenda o que é SSTI (Server-Side Template Injection), como essa vulnerabilidade funciona, os riscos para aplicações web e as principais boas práticas para prevenção.

Some vulnerabilities are loud and obvious.  Others are quiet — hiding in a port nobody ever checks, quietly leaking the heartbeat of a…

Some bugs make you dig deep.  Others make you write payloads, bypass filters, or chain logic flaws together.

Learn about malware analysis and forensics.

Colleagues, are you seeking to land the next job in your Certified Ethical Hacker journey … either within your current company or with a…

Imagine building a house. You put up walls, lock the doors, and think everything is safe. But what if the foundation has a crack you didn’t…

As I started on Day 1 — Linux CLI Shells Bells, I learned about how to navigate the terminal with essential commands. This eventually led…

AWS Security — S3cret Santa

Ever felt like penetration testing is a black hole of endless scans, false positives, and coffee fueled all nighters? What if an AI could…

Imagine a locksmith standing in front of a door. Anyone with enough force can smash it open. But a skilled locksmith doesn’t just break the…

This article documents a real-world security issue identified while performing a bug bounty assessment. The purpose of this write-up is…

A series of articles focused on freely available hacking tools, in this edition we look at the wireless hacking tool Kismet.