Platform: TryHackMe
Room: Metasploit: Introduction
Room URL: https://tryhackme.com/room/metasploitintro
Difficulty: Easy
Please attempt…

Introduction

SQL Injection (SQLi), bir web uygulamasının veritabanı ile iletişim kurarken kullanıcıdan aldığı girdileri yeterince filtrelememesi sonucu…

For a long time, I wasn’t sure if I should write this.

In this write-up, I walk through the “x corp” web security challenge from Cybertalents. The challenge involved analyzing obfuscated…

A new campaign by the Russian-linked group APT28, called Op Neusploit, exploits a Microsoft Office flaw to steal emails for remote control of devices in Ukraine, Slovakia, and Romania.

Firewalls don’t fail. Decisions do.

For our last free Tier 0 box, we will take a look at the Redis service. Redis is a powerful, open-source, in-memory data structure store…

Hey, I’m Shaheer Yasir, better known in the infosec community as Maverick a 19-year-old Red Team Operator and Offensive Cloud Security…

Introduction

It does not Hack Your Software it Hacks Your Trust

From Prison Break to Jenkins Break: Tunnelling for Root

Executive Summary

When I first began learning about API security, my understanding was narrow and overly optimistic. I believed that once an endpoint…

SQL Injection is one of the oldest — and still one of the most dangerous — vulnerabilities in web applications. The good news is that you…

Against all odds, this is the inspiring true story of one African American man who triumphed over grueling work conditions, a fabricated…

1. The Challenge Analysis (Barbarossa CTF)

What If Your SSO Never Checked the Password?

How advanced attackers weaponized a beloved developer tool using elite tradecraft and a clever abuse of security software

Welcome to my latest post! Today, we’re exploring the classic method for identifying the Protected Process Light (PPL) status of a specific…