Cyber Health Hospital: A hands-on attack-tree case study The discomforting reality of threat modeling.

Crystal Palace is a PIC framework that can be used to write, among other things, prepended DLL loaders. The philosophy of the project is to apply evasion tradecraft (also written as PIC), to a capability at link-time. For a DLL, it does this by hooking the…

When you examine requests that perform sensitive actions (such as changing an email or password), you’ll often find some form of CSRF…

Bueno, por aqui os dejo mi write-up de la maquina puzzle de Dockerlabs, de dificultad media

Malware analysis isn’t just about reading code it’s about solving a crime. My investigation began not with a file, but with a panic call…

Author of The Drone Wars OSINT Field Guide to Russian Drone Footage & Verification and How to Hack a Modern Dictatorship with AI: The…

Web applications are at the heart of almost every service we use today, from banking to social media. But with convenience comes risk. Week…

بسم الله الرحمن الرحيم

Abstract

A HackTheBox Journey Through Falsy Values, Cacti Cactus Pricks, and Container Chaos 🐳

A practical, modern map of how LLMs, deepfakes, and agentic tools changed real-world cyber risk — and what to update in your defenses.

Advanced Google + Shodan + FOFA + ZoomEye Dorks for unique endpoint

Go beyond surface-level scans and master stealthy discovery in real pentests.

Uncover hidden directories and files like a pro — even if you’re just starting out.

This box is ranked hard difficulty on THM, it involves us decrypting a special string which grants us SSH creds to the system. Then, we…

Episode 1 — The Calendar That Knew Too Much,

Summary

This guide is strictly for educational purposes only. All demonstrations are performed in a controlled environment using Metasploitable 3…

Hi, this is Spoof (or Spoofey, as you like).  In this write‑up, I’ll explain how I solved a simple web challenge on Hack The Box using…