1. Initial Reconnaissance

Network Traffic Analysis and Forensics to Identify C2 Channels, ARP Spoofing, and Data Exfiltration Techniques

Platform: TryHackMe
Room: Computer Types
Room URL: https://tryhackme.com/room/computertypes
Difficulty: Easy
Please attempt the room…

A startup CTO once hired me because their primary dashboard was taking 14 seconds to load. He told me, “I don’t understand, I added an…

I was shopping for a t-shirt. My proxy was quietly running. One buried JS file later — I had write access to their entire Order Management…

A first-person guide to finding hidden inputs, chasing cache poisoning bugs, and levelling up your recon game — written for hunters at…

If you’ve been doing bug bounty for a while, you’ve probably heard this:

A provisional specification has already been submitted, and an application number is already in place.

A provisional specification has already been submitted, and an application number is already in place.

web_Junkiness

There is no soft way to say this.

Overview

Set up a SOC lab with Elasticsearch, Kibana, and Fleet Server.

Explore Elastic Defend telemetry and alerts to investigate endpoint activity.

Platform: TryHackMe
Room: Client-Server Basics
Room URL: https://tryhackme.com/room/clientserverbasics
Difficulty: Easy
Please attempt the…

How I built a tactical, React Native-powered network vulnerability scanner for Android.

LayerX research finds 82 Chrome extensions collecting and selling user data, affecting at least 6.5 million users through disclosed but concerning practices.

Some security issues don’t come from complex systems or clever exploitation. They come from ordinary features doing slightly more than…

Difficulty: Medium | OS: Linux | Category: Web + PrivEsc

Not the dramatic kind. No zero-days, no ransomware war rooms, no breach notifications landing at 3am. The slow, structural kind, the…