Finding PII via Broken Access Control.

Most security failures are not about someone breaking down the door. They are about the system quietly forgetting to lock it in the first…

Target IP

A quick CTF walkthrough on web enumeration, Hydra brute-forcing, and cracking SSH keys.

Room CTF “Attacktive Directory” di TryHackMe dirancang untuk mengajarkan cara mengeksploitasi kerentanan umum pada lingkungan Windows…

Hello everyone! This is an hard rated room from the TryHackMe platform titled “URANIUM CTF”

Tryhackme | AD: Basic Enumeration Diberikan sebuah akses VPN ke jaringan target pengguna tanpa kredensial yang mana membutuhkan pengumpulan data informasi sebanyaknya mungkin pada domain tersebut …

Subtitle:

This project aims to expand our cybersecurity lab by installing Windows 10 as our second Virtual Machine in VirtualBox.

[Intro]

Finding Hidden Endpoints in JavaScript: How I Discovered an Unauthenticated Password Update Function While testing a web application in a Vulnerability Disclosure Program, I came across an …

Assalamualaikum and Hi! Here with me again, this write-up just been made after I already been awarded with $$$. Let’s get started! 😃

Introduction

When Settings Become Shell, Gemini CLI executes tools.discoveryCommand from .gemini/settings.json during startup tool discovery, turning a…

A beginner bug bounty story about discovering a CAPTCHA bypass in a NASA reporting system and learning the importance of persistence.

First off we start with a simple Nmap scan on the target:

Durante años el cibercrimen fue percibido como una actividad caótica compuesta por hackers aislados, pequeños grupos criminales y foros…

CVE-2026–26110 is a critical memory corruption vulnerability identified within the Microsoft Office suite. The flaw is categorized under…

Stryker, a major medical equipment provider for the healthcare sector, has suffered a destructive cyberattack that wiped corporate data and…

Capitulo 3: Information Gathering & Vulnerability Identification

In today’s digital world, cybersecurity has become an essential part of technology. Almost every activity we perform today, such as online…