Meu primeiro passo é iniciar um portscan para descobrir os serviços rodando na máquina. Gosto de rodar o rustscan para descobrir mais…

Microsoft Entra Agent ID flaw allowed privilege escalation and tenant takeover via Service Principal abuse, now fully patched by Microsoft.

Failure 2 — MD5 Password Hashing

Description : Misconfigs conquered, identities claimed.

Reading time: ~12 minutes

The OSWE exam is not a bug bounty. You don’t find one vulnerability, write it up, and move on. The exam wants a full compromise, and if you…

HTB Footprinting Lab — Hard Hey everyone! Today I’m tackling the Footprinting (Hard) lab on Hack The Box Academy. This one was a real challenge because it required digging into services that …

Walking through credential dumping in an Active Directory lab — from initial foothold to domain pivot

Introduction

Im solving the Carnage Network Analysis scenario in THM.

Initial Reconnaissance

Learn Elastic Stack basics through hands-on SOC lab investigation.

“Most apps rely on authentication and call it ‘secure.’ I did too, until I started breaking my own systems. Here’s why Zero Trust changed…

In today’s digital world, every click, message, login, and website visit travels through a network as small pieces of data called packets…

A quick nmap scan of the target revealed we had the following ports open:

Welcome to a new Medium post! In this one, I’ll walk you through my reverse engineering process for the vulnerable KslD.sys driver. To be…

A hands-on walkthrough of the Windows Fundamentals Part 1 room on TryHackMe.

It was just another day at work. It always is isn’t it? Until we get that call of “Hey my email is sending out emails to a bunch of people…

Hello, stranger — let’s begin.

North Korean group HexagonalRodent stole millions in Q1 2026 using AI-generated lures and backdoored VS Code tasks. Protect your Web3 wallet now.

Hi, I’m Omar Abdelsalam.