Our company may have been compromised, we need your help ASAP.

Learn how trusted ML components can be turned into attack vectors.

El Bandito walkthrough covering SSRF, smuggling, credentials, and flags.

Meu primeiro passo é iniciar um portscan para descobrir os serviços rodando na máquina. Gosto de rodar o rustscan para descobrir mais…

Microsoft Entra Agent ID flaw allowed privilege escalation and tenant takeover via Service Principal abuse, now fully patched by Microsoft.

Failure 2 — MD5 Password Hashing

Description : Misconfigs conquered, identities claimed.

Reading time: ~12 minutes

The OSWE exam is not a bug bounty. You don’t find one vulnerability, write it up, and move on. The exam wants a full compromise, and if you…

HTB Footprinting Lab — Hard Hey everyone! Today I’m tackling the Footprinting (Hard) lab on Hack The Box Academy. This one was a real challenge because it required digging into services that …

Walking through credential dumping in an Active Directory lab — from initial foothold to domain pivot

Introduction

Im solving the Carnage Network Analysis scenario in THM.

Initial Reconnaissance

Learn Elastic Stack basics through hands-on SOC lab investigation.

“Most apps rely on authentication and call it ‘secure.’ I did too, until I started breaking my own systems. Here’s why Zero Trust changed…

In today’s digital world, every click, message, login, and website visit travels through a network as small pieces of data called packets…

A quick nmap scan of the target revealed we had the following ports open:

Welcome to a new Medium post! In this one, I’ll walk you through my reverse engineering process for the vulnerable KslD.sys driver. To be…

A hands-on walkthrough of the Windows Fundamentals Part 1 room on TryHackMe.

It was just another day at work. It always is isn’t it? Until we get that call of “Hey my email is sending out emails to a bunch of people…