Platform: TryHackMe
Room: OWASP Top 10 2025: Application Design Flaws
Room URL: https://tryhackme.com/room/owasptopten2025two
Difficulty…

Description : Understand the Preparation phase of the Incident Response lifecycle.

Ah, coming back to write on Medium after almost a month away — and fighting through another platform suspension — honestly feels nostalgic…

Hey, I’m Hamza Hashim. On socials I am known as refang. I write about real bugs I find out in the wild. Not CTF challenges, not labs. Real…

A detailed walkthrough of the Facts machine from HackTheBox

Category: AI 🗣🗣🗣📢📢 🔊🔊🔥🔥🔥

Overview

📋 This writeup is part of the Lainkusanagi OSCP Like List — a curated collection of machines recommended for OSCP preparation.

Initial Information

As always, we start off with an nmap scan.

Artificial Intelligence (AI) is rapidly transforming the way businesses operate and how professionals work. From customer service and…

If you work in Digital Forensics and Incident Response (DFIR) or manage a Security Operations Center (SOC), you already know the truth…

Introduction

1. Introduction

By Maha Aledresi

Understanding GraphQL architecture, reconnaissance techniques, and common security vulnerabilities.

Why Does Account Takeover Detection Miss Residential Proxies? The IPs behind modern credential stuffing look exactly like your customers. Here is the one signal that tells them apart. Account …

If you’ve read any of my writing here, thank you — it means a lot.

Web Application Firewalls have been built around the same idea for decades: inspect the request, match it against known attack patterns…

One of the fundamental principles of API security is ensuring that applications expose only the information that users genuinely need.