Difficulty: Easy

Saw the Meme? Yeah, It’s Frustrating AF

Join me in looking at the future of cybersecurity: AI-Augmented Pentesting, where expert human testers use AI to keep companies secure.

If you spend enough time on X (formerly Twitter) looking at Web3 projects, you eventually see it happen. A protocol gets drained, a Discord

When I first started learning offensive and defensive security, I followed every recommended course and platform: TryHackMe, Hack The Box…

In this engagement, we encountered a target that appeared simple on the surface — a cloud storage provider — but hidden beneath were…

What is React2Shell Vulnerability?
This vulnerability affects React Server Components (RSC) and the frameworks that implement them…

This box is ranked medium difficulty on THM, it involves us uploading a reverse shell using FTP anonymous login and then abusing a SUID bit…

TL;DR Walkthrough of the Advent of Cyber 2026 Day 16 room; Registry Furensics. This is far from the first or only writeup on this room…

Difficulty: Easy

Advent of Cyber — Day 4: AI in Security — Old saint Nick The lights shimmered across Wareville as servers hummed steadily inside The Best Festival Company’s data center. On the surface …

Room: https://tryhackme.com/room/phishingpond

Imagem ilustrativa da room.

Over the past six months, my understanding of cybersecurity has shifted in ways I didn’t initially expect. When I began my internship, I…

By vishal raj . December 31, 2025

Another week, another API incident.

The success of any modern application depends on its Application Programming Interface (API). Protecting the data accessed through these…

Hey everyone 👋…

Account Confusion is one of the most dangerous vulnerability classes on Solana. It is behind the 52M$ Cashio Hack and countless others

This is a simple write-up about a critical vulnerability I discovered due to a JWT signature validation bypass

“Your middleware pipeline is like airport security — skip a checkpoint and everyone gets through.”