Hey guys, so today I was solving an XSS lab and I got stuck for way longer than I expected But I learned something really important, so…

It was November 24, 2025. I opened Twitter and my entire feed was on fire.

Let’s be honest — User Account Control (UAC) bypasses never really went away. They just… faded into the background.

It starts like any ordinary day on social media — a new friend request, maybe from someone with mutual interests or a professional-looking…

🚩 Challenge 7: “Jumping Pixels”

I thought this was going to be an adventure. And wow, it was. This was an interesting lab. Here goes:

Initial Reconnaissance: Scanning the Target with Nmap Scan

There’s a rule that every crypto holder learns, or should learn, early: your seed phrase never goes anywhere near an internet-connected…

Basic Pentesting
My solution process for the Basic Pentesting CTF on TryHackMe.

📖 Table of Contents

Introduction

investigating the printer's local storage exploitation from pcap

Investigating Windows memory dump revealing execution chains start from lnk to process injection.

Hi, I’m glad to share with you my writeup for solving ALL Forensics Challenges in HTB University CTF 2025: Tinsel Trouble.

﷽

Welcome to this write-up.

Domina OAuth: aprende sus vulnerabilidades, vectores críticos como JKU y Account Takeover, y estrategias de encadenamiento.

*How a conference demo turned into a full bug bounty lab with Claude Desktop, Discord remote access, and automated health monitoring on…

Almost every modern web application uses JSON Web Tokens. Login to a site, get a JWT. Call an API, include your JWT. Change your role…

Keşif Süreci: Duvara Toslamak

He wrote the business case. Here’s the engineering.