In this walkthrough, I will be performing a full penetration test on the TryHackMe Blueprint machine. The goal of this machine is to…

Prepared by: Moatif

Bayangin kamu lagi duduk di kafe favoritmu, memesan kopi, dan membuka laptop. Ketika kamu melihat jaringan Wi-Fi tersedia gratis, tanpa…

Series Note: This is the opening post of “Mastering Active Directory — Simplified,” a structured blog series built to take you from zero…

X may now reward original creators instead of giant repost accounts chasing ad revenue.

Hello readers, I just learned about this awesome way to get information about and from the database by exploiting the SQLi vulnerability in…

This case study started with a verification-code flow that looked normal on the surface. After repeated wrong attempts, OLX showed a…

A beginner’s guide to UNION based SQL injection — finding columns, extracting data and retrieving multiple values

If you ship an AI product today whether an LLM-driven app, an autonomous agent, a RAG pipeline, or an MCP integration then you are already…

Hello guys, welcome back to another part of exploiting Metasploitable. If you haven’t read my previous blog on Metasploit, check it out…

How Canary Tokens Are Becoming the Silent Guardians of Modern AI Systems

Solution:

Some people spend their second year of engineering building projects, grinding LeetCode, and collecting certifications.

Step 1

TryHackMe Premium room

Build Python scripts for web recon, network scanning, hash cracking, and SSH brute-forcing.

The goal

When people think about penetration testing tools, they usually jump straight to the popular names:
Metasploit, Burp Suite, Nmap…

GitHub: https://github.com/SeifEldienAhmad/ghost0-Assistant

This is my writeup for the DroidCave challenge from 8kSec Android Labs. The goal is to build an app that looks completely innocent but…

Platform: TryHackMe
Room: Guided Pentest: Web
Room URL: https://tryhackme.com/room/guidedpentestweb
Difficulty: Easy
Please attempt the…