The FTP server was anonymous. The password was “secret”. The vim binary was sudo. This box didn’t hide anything, it just waited to see if…

The password was in robots.txt. The sudo was unrestricted. The box didn’t fight back, and that’s exactly the point.

An alarm tells you something happened. A camera tells you the whole story. You need both running at once.

Write-up — Enumeration to Root

Everyone learns web hacking. Very few people learn how to attack desktop applications. I wanted to change that.

A quick write-up on my eJPT attempt. Sharing how my eJPT exam went down, from the initial scanning to the pivot network.

Introduction

“A zero-day doesn’t wait for your next patch cycle. Neither should your response.”

“Map? Where we are going, we don’t need maps.” — Room tagline

This Position mate in A8 one move

For a student whose ambition was to become a doctor, she worked literally 24 hours a day to achieve her dream and finally ended up in the…

I highly recommend this room from TryHackMe as it teaches you basic SOC investigation skills and how to sift through event logs and find…

Introduction

We begin with a very simple piece of information. You have stumbled upon a Battered letter. Since everyone else has given up on the letter…

“Misconfigs conquered, identities claimed.”

My First VulnHub Walkthrough

Machine details

“Everyone remembers the moment the terminal stopped being scary.”

A no-nonsense space for bug hunters, web pentesters, CTF players & security researchers who are done learning alone.

Yesterday was all about XSS. Today, I spent most of my time diving into IDOR (Insecure Direct Object References) and Broken Access Control…