Wireshark, a tool used for creating and analyzing PCAPs (network packet capture files), is commonly used as one of the best packet analysis…

Fawn Solving Fawn gives an basic knowledge about FTP servers how to access and run or download a file. Without taking time I will reveal answers . but some answers I will explain it . What does the …

Like many of you, I started my journey in technology with curiosity but zero direction. It’s a constant battle between offensive minds (who…

When WordPress comments become a persistent shortcode execution surface

Hi everyone, today I will be attempting the Light CTF on the TryHackMe platform.

Most people think hackers need complicated exploits to break into web applications.

Hi, I’m Hashem Ali Kahil , Orion7715

The phishing campaign that landed you domain user credentials with direct access into MS Office365 in 2019 gets your infrastructure burned…

https://tryhackme.com/room/foolsm8v2

So apparently losing once wasn’t enough for this room. It came back for round two.

What is LLMNR?

Exploiting Blind SQL Injection by Triggering Time Delays

From a Forgotten `htmlspecialchars()` to Full Admin Takeover The Story of CVE-2026–50740 let me tell you a story about how one missing function call a single forgotten `htmlspecialchars()` turned …

I read the published research on AI-generated code security instead of going off vibes. The vulnerability numbers are almost beside the…

When your Marriott Phoenix SPA report (#3642444) was closed on April 1, 2026, the application security community at large still treated…

After completing reconnaissance and scanning, I finally reach the phase that many people associate most with penetration testing —…

Magic is a medium difficulty HTB machine which involves SQL injection attack, arbitrary file upload and SUID binary exploitation.

Why replacing human cybersecurity professionals with AI is a fundamentally flawed idea, and what the future of the profession actually…

Task 1 — Introduction

Task 1 — Introduction

Step 1: Reconnaissance