How one malformed Content-Type header turned a web framework into a remote shell — and exposed 147 million people.

I still remember the call. It was a quiet Sunday morning, and my cousin Jenna — who runs a small online boutique outside Portland — sounded…

PortSwigger Writeup: 1.Detecting NoSQL Injection Hey everyone! Today I want to share a walkthrough on how to solve one of PortSwigger’s apprentice-level challenges: Detecting NoSQL injection. In …

Introduction

boot2root machine for FIT and bsides Guatemala CTF

Proactive checks that catch issues early.

Author: Shikhali Jamalzade GitHub: github.com/alisalive LinkedIn: linkedin.com/in/camalzads

## Building a Professional, Educational, and Evidence-Safe Framework for Security Automation

A defensive walkthrough of suspicious traffic patterns, timelines, and the questions I would ask during analysis.

GraphWorm gives every hacked machine its own private OneDrive folder. The malware checks it for orders and drops stolen files back in and…

Stripping away the Hollywood magic to understand the tech industry’s favorite security tool.

Antivirus software is useless if an attacker manipulates you into opening the front door. Here is exactly how modern payload delivery works…

In this writeup I'll demonstrate how attackers use Discord as a C2 server.

Chain together vulnerabilities in a cascading attack, where every piece you find knocks over the next.

Learning Objectives

Difficulty: Easy Platform: TryHackMe Tools Used: Nmap, Telnet, Hydra Target IP: 10.129.144.189

Hello everyone, today we are going to solve the “CMSpit” room, marked Medium on THM.