WebVerse is a new platform by Leighlin Ramsay. I saw it pop up in my feed and before long, was talking to Leighlin who was kind enough to…

Cross-Site Scripting (XSS) is one of the most common web vulnerabilities that every beginner in cybersecurity should understand.

Zero-Click Attack | Phone Hacking | Hire Professional Hacker What’s a Zero-click attack? A zero-click attack (also called a zero-click exploit) is a highly sophisticated cyberattack that …

Claude Mythos is an autonomous zero-day hunter that exhibits “deceptive behavior.” The precedent it sets for AI governance is staggering.

In this write-up, I document my approach to compromising the Deathnote vulnerable machine from VulnHub.

By Mahesh R. Amale

Initial Access

Understanding how keyboard strokes are intercepted using the pynput library.

During a penetration test against the INLANEFREIGHT organization, you encounter a non-domain joined Windows server host that suffers from…

FBI Atlanta and Indonesian National Police dismantle W3LLSTORE phishing market linked to $20M fraud, seizing domains and detaining developer.

Challenge Description

Broken access control continues to be one of the most impactful vulnerabilities in modern web applications. In this blog, I’ll walk you…

Analysis of 10 critical CVEs from March 2026 with practical insights for bug bounty and vulnerability research

🧠 Challenge Overview

1. Scenario

A real-world breach that proves attackers don’t break in, they exploit trust.

Organizations can outsource services, but never accountability. This is why third-party risk is now a matter of operational survival.

GLITCH — TryHackMe WalkThrough Date: 28/08/2025 Room Link: https://tryhackme.com/room/glitch My Profile: https://tryhackme.com/p/RayenHafsawy 🧭 Introduction In this write-up, I demonstrate how I …

Platform: TryHackMe
Room: Inside a Computer System
Room URL: https://tryhackme.com/room/insideacomputer
Difficulty: Easy
Please attempt the…

Hello friend, I’m Thomas Youssef — and this one is a little different from my usual access control writeups. No role swapping. No token…

EternalBlue is a highly critical, weaponized computer exploit developed by the U.S. National Security Agency (NSA) that takes advantage of…