ColdVVars — TryHackMe WalkThrough Date: 06/05/2026 Room Link: https://tryhackme.com/room/coldvvars My Profile: https://tryhackme.com/p/RayenHafsawy 🧭 Introduction In this write-up, I demonstrate …

Cracking hashes challenges

By: Emmanuel Cajucom

“A very small man can cast a very large shadow.” — Tyrion Lannister

Security Assessment Report: Google XSS Game

A practical pattern for keeping third-party code out of production until it’s earned its way in.

How modern web applications keep failing at client-side authorization, trust boundaries, and access control

Herkese merhaba. Genel olarak kullanıcı cephesinde çok sık karşılaştığım ve kırılması en zor olan bir yanılgı var: “Eğer bir yazılımı…

A 3rd-year cybersecurity student’s honest, step-by-step guide to building a real Security Operations Center with Wazuh, Active Directory…

SSH Hardenings That Can Stop Almost All Attacks At Your Server Part 1

Trust Me, I’m Calling From Customer Care… Or perhaps more accurately… trust me, I’m probably not. Recently I applied for a credit card. Standard adulting activity. A few days later I got a …

In March 2022, the Ronin Network — the blockchain underpinning Axie Infinity, one of the most successful Web3 games ever — suffered one of…

Simple look at building smart wordlists for security testing.

First we want a virtual machine to run the operating system. I downloaded vmware workstation from browser.

Google is not just a search engine.

A public exploit. No race condition. Near 100% success rate. And it bypasses the fix you probably already applied.

How to find and prevent SQLi vulnerabilities

Shoutout to AkiraOwen for his writeup/fuzzing method. This lab is/was a bit of a jigsaw which required putting the right pieces in order to…

DigiCert revokes 60 code signing certificates after hackers used a malicious support chat attachment to sign the Zhong Stealer malware.

A browser-based playground where you can sharpen your bug bounty instincts in five minutes — no installs, no signups, JA/EN supported.

1. Instruction-Level Parallelism (ILP)