Two models on Hugging Face looked ordinary — but the instant you loaded one, it opened a backdoor to your machine. The trick: a file…

Room Scenario

Odanın linki: https://tryhackme.com/room/easypeasyctf

SOC L1 Alert Triage Writeup / Walkthrough -tryhackme We will learn about SOC alerts and how we can build a systematic approach to effectively triage these alerts. Introduction An alert is a core …

# Why OSCP Certified No Longer Guarantees a Job (And What Actually Does) **The cert still matters. The market changed around it.** --- Three years ago, "OSCP" on a resume got you a callback within 48 …

I was finishing up the PNPT content and still working on PJPT too. However, I was able to combine both in one go (sorta). I wanted to get…

The story of how one X account lost monetization and what it teaches us about building online.

Achieving Remote Code Execution (RCE) by abusing apache .htaccess to upload a php payload.

It was one of those bug hunting nights where everything felt dead. I had been clicking around for hours, throwing requests into Burp Suite…

Introduction

Category: Web Application Security
Vulnerability Chain: SQL Injection → Database Access → Remote Code Execution
Severity: Critical
Status…

Introduction

Four candidates. Three threats. Make the production call.

DISCLAIMER: The techniques demonstrated in this write-up are intended solely for educational purposes. Please ensure that any testing is…

Phase 1: Reconnaissance (Recon)

Note about this medium article: This was originally written as a .pdf document, and when I converted the source file to this medium article…

All testing below was performed in an isolated lab environment against Metasploitable 2 — an intentionally vulnerable Ubuntu VM built by…

https://tryhackme.com/room/neighbour

Objetivos de aprendizagem

https://tryhackme.com/room/corridor

Atdork: OSINT Dorking Tool dengan Resilience Engine untuk Penetration Testing dan Security Research