As always, we start off with an nmap scan.

Using web server memory issue to gain deeper system access

TryHackMe Walkthrough

Artificial Intelligence security challenges are deceptive by nature. At first glance, they often look simple: there is a chatbot, there is…

Lab Setup

💡This blog was originally posted on 26 May 2026 and subsequently updated on 04 June 2026.

Module stomping (aka module overloading or DLL hollowing) is a technique for hiding malicious code within a process's memory. It essentially works by loading a legitimate…

Cybercriminals are using SEO poisoning and fake Gemini and Claude installer sites to infect developers with fileless malware and steal data.

As someone who loves customizing my browser, I recently discovered a bug in the Homey Chrome Extension while trying to upload a live…

I was testing this application where as a normal user you can report other user’s on the platform which maybe sending spam messages or…

Welcome to another story in the “Lessons Learned” series, where we discuss real-world vulnerabilities from the perspective of an…

Sometimes, the best way to understand complex cryptography is to start with the absolute basics. Today, we’re going to look at one of the…

By Yusha Kahn

Task 1: Introduction

A child trapped inside a high-security holding facility knows nothing of borders or laws; they only know the terrifying absence of…

What I learned lurking in the shadows, so you don’t have to make the same mistakes

Kerberoasting is a post-exploitation attack technique targeting the Kerberos authentication protocol, enabling adversaries to extract…

Welcome to this new Medium post, this week we will look at a series of three basic but always useful well documented UAC Bypasses in…

A deep-dive into one of malware’s most elegant tricks: resolving Windows APIs without a single import or readable string.

Task 1: Lab Overview

This is my first CTF write-up and it’s about “admin has the power” from cybertalents.com