Hi, this is the new room under the Jr. Pen Tester path in TryHackMe. You can join the room here .

Lab can be found at: https://webverselabs-pro.com/

Hi guys,

بسْمِ اللَّهِ الرَّحْمٰنِ الرَّحِيمِ، وَالصَّلَاةُ وَالسَّلَامُ عَلَى النَّبِيِّ الْمُجَاهِدِ الشَّهِيدِ…اللَّهُمَّ انصُرْ أَهْلَ غَزَّةَ…

I was testing an application that supported both local accounts and SAML-based SSO. Nothing looked obviously broken. Signatures were valid…

Description : Learn how to detect and exploit SQL Injection vulnerabilities.

I wanted to write a proper review of ARTOC because this course does not feel like a typical red team course where you watch a few videos…

Access the hidden item in this Valentine’s gift shop.

NahamStore Part-1 Recon

CVE-2026–35616 shows why endpoint management servers are not just admin consoles. They are fleet-wide execution platforms, and attackers…

Chaining small web issues to gain deeper system access easily

Finding my Ikigai Through Ethical Hacking and Conquering Imposter Syndrome Honestly, I never thought I would have over 200 followers on this platform, and I am extremely grateful that my writing and …

Imagine spending months building a state-of-the-art fortress. You install reinforced steel doors, motion sensors, and a complex biometric…

Modern web applications process enormous amounts of user-controlled data every second - login credentials, search queries, transaction…

Lab can be found at: https://webverselabs-pro.com/

A single, seemingly innocent HTTP endpoint can form a critical business-impact chain when multiple structural PHP weaknesses are stitched…

Akwaaba! everyone. This one was quite fun, and I will breakdown my methodology. My last writeup was a $500 OAuth Account Fusion bug which…

An attacker hit a Python notebook with a CVE, then handed the wheel to an AI agent. In under an hour, the agent dumped an internal…

Introduction