Imagine a locksmith standing in front of a door. Anyone with enough force can smash it open. But a skilled locksmith doesn’t just break the…

This article documents a real-world security issue identified while performing a bug bounty assessment. The purpose of this write-up is…

A series of articles focused on freely available hacking tools, in this edition we look at the wireless hacking tool Kismet.

You got the right team HERE

Learn the basics of AWS enumeration

🔍 Username Enumeration via Subtly Different Responses

“Welcome” by Noah Heroldt is a lab where you can test your Active Directory skills by identifying vulnerabilities to compromise the DC. It…

Walkthrough for “BankSmarter” on Hack Smarter

Welcome to this new Medium post. If all goes well, this will be one of the last posts released in 2025, so I wanted to make it special. For…

Мне неоднократно приходилось умиляться, наблюдая, как рунетовские, да и общесетевые, эксперты открывают для себя на треке нашей Главной…

Prompts, Filters, and Commands for Incident Response & Malware Analysis

BlackPearl isn’t just a name. It’s a challenge. In this walkthrough, I’ll take you through the full exploitation path of the BlackPearl…

This room is for the AOC 2025 (AWS Security)

بِسْمِ اللَّهِ الرَّحْمَنِ الرَّحِيمِ

From One-Liner Commands to Real-World Vulnerabilities That Pay

HackTheBox: SecretPictures

Take this seriously. Google kicked off Dangerous December with a warning that Android is now under attack. Two vulnerabilities have been…

TL;DR In this lab, I identified an uncommon open port tied to network file sharing, investigated exposed RPC services, and discovered a…

Understanding OWASP API Security Top 10 With Live Breach Examples — A Practical Guide

SAMLSmith is a C# tool for generating custom SAML responses and implementing Silver SAML and Golden SAML attacks. It provides comprehensive functionality for security researchers and penetration t…