Note :The website name isn’t disclosed, and all user details are blurred in black-and-white images.

NTLM Relay Attack

What is SQL Injection?

Authentication systems verify the identity of users before granting access to protected resources. These systems rely on various…

Web Application:

A Linux system can look perfectly healthy —   and still be minutes away from doing something destructive.

Hi guys.
 In this writeup we’re going to solve the first challenge from the Pwn101 collection on TryHackMe.

In this picoCTF Trickster walkthrough, the first step is web directory enumeration, where I use Gobuster to discover hidden files and…

I successfully automated my entire social media workflow using n8n and GPT-4o.

How Broken Access Control Leads to Cross-Tenant Data Exposure

After my final tweet of 360-Day Bug Hunting I got lot of DM asking

Going beyond basics to understand how attackers turn input into arbitrary command execution, and how modern architecture fights back.

Anthropic says it’s the first documented case of a large-scale cyberattack executed without substantial human intervention

OS: Windows(Active Directory) Difficulty: Easy Status: Retired

MongoDB has confirmed active exploitation of a high-severity unauthenticated information disclosure vulnerability tracked as…

If you are looking for an entry-level blue team certification that actually builds investigation skills, Blue Team Level 1 is a strong…

In penetration testing, technical skills alone are not enough. Documentation and proper logging are just as important as the attacks…

Description

Description

Room Name: Phishing — Merry Clickmas 
Level: Easy 
Category: Phishing