Executive Summary

En este write-up se documenta la resolución completa de la máquina Smol de TryHackMe. Se explotan múltiples vulnerabilidades en WordPress…

In many Capture The Flag challenges, difficulty is measured by how many tools or algorithms you need to run.  This challenge takes a…

Learn about A01, A07, and A09 in how they related to failures in the applied IAAA model.

Security incidents don’t always begin with zero-days, nation-state actors, or advanced malware.

Most security problems don’t start in code. 🖥️

Recently, I was working on a Vulnerability Disclosure Program and came across a subdomain: what.redacted.com .

Overview

The Shadow IT Crisis Costing Companies Millions (And Nobody’s Watching)

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Tools, Mindset, and Mistakes From Working With Bluetooth and Wi-Fi Devices

Why Most People Fail at Personal Growth (And How You Can Avoid the Same Traps) Imagine waking up five years from now and realizing your life is radically better — not because of one massive …

https://docs.google.com/document/d/1xeMllakiDtMYUoRBLszsfLzvyGk5zqJ4/edit?usp=sharing&ouid=116381859028627183415&rtpof=true&sd=true

This lab helped me understand how improperly handled user input can allow attackers to inject and execute malicious JavaScript in a…

How a “Harmless” Image Upload Turned Into Internal File Reads, HTTP Fetching, and Remote Share Access

The first step was to run the target machine using VMware. After the machine was up, I followed my usual workflow by using netdiscover to…

Can LLMs exploit freshly published vulnerabilities? Yes, just like an experienced hacker.

Introducción

I discovered a private programme via google dork. It was a coding platform.

I followed the advice exactly.

From Python automation to PHP Type Juggling and JWT Forgery — here is how I cleared the board.