If Part 3 was about thinking smart instead of scanning hard,

This repository contains a comprehensive writeup of the BitStorm cryptography CTF challenge.

What Are CIS Controls and Why Do They Matter?

Daily cyber threats are on the rise and with the increase in the digital technology, digital threats also rise day by day. Banking, health…

Exploiting Source Code Leakage and SSRF to Bypass Python Sandboxes

Understand the CIA Triad and how it shapes cyber security mindset.

LoveLetter Locker & IDOR Exploitation (TryHackMe Write-Up)

If you’ve ever tested a WordPress target and discovered:

Ever spent hours manually fuzzing inputs or hunting for XSS, only to find out you missed a simple injection point? You’re not alone. Even…

It’s been a while since I wrote anything here. I hope all my fellow hunters and infosec friends are doing well.

With the exploding growth of mobile applications across fintech, healthtech, ecommerce etc. Mobile application security is no longer good…

How “vibe coding” led to a catastrophic LFI and Credential Exposure

I picked a random mid-sized tech company. No special reason. Just wanted to see what a typical organization looks like in stealer logs.

Introduction

If you spend your days in a Security Operations Center (SOC), you know the drill. We draft a YARA rule, the industry’s beloved Swiss Army…

If you are reading this then it simply means that you are here for a no-BS guidance about OSCP from someone who survived, so yes! I am glad…

Use your web exploitation skills against this matchmaking service.

In this room, we will learn about FlareVM, which stands for Forensics, Logic Analysis, and Reverse Engineering, and we will get familiar…

First of all scan the machine using “sudo arp-scan -l” and after typing the password it'll show the target ip