tryhackme link → https://tryhackme.com/room/attacktivedirectory

Siber güvenlik staj sürecimde hem teorik hem de pratik olarak web ve mobil uygulama güvenliği üzerine yoğunlaştığım günlerden aldığım…

1. If we wanted to list all the .txt files in the current directory, what command would we want to use?
The command used is ls .txt. The ls…

From humble BSC beginnings to Smart Cashtags, Grokipedia verification, and the plot twist of the century.

Custom tiny wordlist to find information disclosure bugs

One random day.Bored of people. Bored of noise. Bored of everything.

The Project:

For years, security has been treated as a final checkpoint — something to “add” after features are complete. In today’s environment of…

The most fundamental thing when studying hacking is the “shell.”

Before tools, before frameworks, before hype, offensive security has always been about one thing: Thinking like an attacker. That…

Privileged accounts — admin, root, or superuser accounts — are high-value targets for attackers. Despite years of warnings, many…

A Case Study in Information Disclosure and Sensitive Directory Exposure

During my internship at Prodigy Info Tech, I developed a Network Packet Analyser using Python to analyse how data is transmitted across a…

🕵️‍♂️ Finding High-Impact Bugs Without Heavy Scanning

Ever feel like you’re drowning in manual recon work? You’re not alone. Here’s a wild stat: top bug bounty hunters reportedly automate up to…

‏

Lessons from a Rejected DeFi Audit Contest Submission

Room Name: TryHeartMe
Platform: TryHackMe
URL: [Link to the challenge](https://tryhackme.com/room/lafb2026e5)
Difficulty: Easy
Category…

Moving forward, the first step in a red team pentest is the following:

Humans Are Systems Too

A tiny search box that quietly exposes your entire database