Prompt Injection

This challenge is from the Love at First Breach Valentine event on TryHackMe.

In the world of IT administration, we are the gatekeepers. We don’t let a server go live until it’s hardened, the policies are tight, and…

Free Link 🎈

When “Just This Once” Costs You Everything

When Help Desk Software Becomes an Attack Vector: Deep Dive into the SolarWinds Web Help Desk RCE (CVE-2025–40551)

In this article, we will understand CSRF Lab 8 from the Web Security Academy by PortSwigger.

Successfully Completed My 4-Week Cybersecurity Internship Over the past month, I gained hands-on experience in: Week 1: Security Threat Identification The first week focused on reconnaissance and …

In this challenge, we are given access to a web application called LoverLetterLocker, a platform where users can write and store their…

Most organizations still think in terms of individual vulnerabilities: one CVE, one severity, one fix.
Real attackers don’t.

It’s easy to believe you’re “winning” the moment a platform starts paying you.

In sports we usually measure players by points assists trophies and highlights. We argue about who is better who is more talented and who…

This challenge is part of TryHackMe’s Love at First Breach 2026 Valentine event.

Introduction

Author: 0x3rr0rhunt3r

SQLite Exploitation, Hash Analysis & Cookie Manipulation

Step 1: Enumeration

The Long Road Before the Win

Based on the original report by natann on HackerOne: https://hackerone.com/reports/3417819

After publishing my first bug bounty blog about brute-forcing a 4-digit OTP, I started revisiting some of my old findings. While scrolling…

Dedicated to everyone we lost on 17–18 Dey 1404(January 2026) in Iran. Rest in peace❤️.