Challenge Link: https://dojo-yeswehack.com/challenge-of-the-month/dojo-1-

✍️ Introduction

Hook — Real-World Scenario

A week ago, I was assigned a task that genuinely excited me — perform a red team penetration test on base images and identify reachable and…

“Wait, did I just push the flag to GitHub?” In this TryHackMe CTF challenge, a developer accidentally committed sensitive code ,but forgot…

Direct answers for all tasks —

Direct answers for all tasks —

Low Level

I was away for a while. Two years in bug bounty and security research will do that to you — it changes how you see the work.

Kali MCP Server Explained ⚡🐉

BCC/eBPF to spoof emulator artifacts

Cyber scams are becoming more advanced — and one of the latest threats, known as the ClickFix scam, is catching users off guard worldwide.

The target application relied on an antiquated Angular framework managed via Bower dependencies. Specifically, the environment utilized a…

Hello everyone! This marks my third writeup on Medium. My goal is to stay consistent, tackle more challenges, and keep learning and I’m…

Difficulty: Trivial | Flags: 1 | Category: Information Disclosure

We will traverse the roads of HTTP together covering request, response, error codes and much more.

In 2026, bug bounty hunting will involve more than simply manual testing, recon scripts, and conventional payloads. AI has fundamentally…

Pengujian penetrasi keamanan aplikasi Android dilakukan terhadap AndroGoat dengan fokus pada identifikasi potensi kerentanan pada aplikasi…