Hi HACKERRRRRRRRRssssssss
today i will share with you Corridor CTF on platform TryHackMe

TASK-1: Introduction

Hello everyone and welcome to this new write-up for this Active Directory hacking challenge.

Burp Suite Professional is one of the most widely used tools for web application security testing, providing features that help security…

How a 25-minute interview discussion completely changed the way I think about Supply Chain Security.

Welcome to my writeup for the Support room on TryHackMe. This room is a fantastic playground for practicing fundamental web application…

How Active Directory penetration tests should begin with environmental context.

Exploiting SSRF vulnerability, bypassing hostname filters, and leaking source code using PHP wrappers to capture the flag.

SQL injection is one of the oldest web application vulnerabilities.

Hello hunters,

introduction

A first look at Crusader — a local-first web security proxy built for how people actually hunt in 2026.

Helloooo once again readers, I had the opportunity to take the Certified Active Directory Pentesting Expert (CAPE) exam offered by…

From entropy scores to PE headers — how to trace an information stealer’s hidden structures and dynamic footprints before execution.

Most teams treat AI as a defensive crisis. Few examine what it does to authorised offense — and what happens if only adversaries…

TL;DR Apache IoTDB has patched three flaws in its time-series database. The worst is a critical path traversal bug, CVE-2026-24014, scored 9.8. A second flaw allows an authentication bypass, and a…

At a glance Actor A Silver Fox (UTG-Q-1000) Ghost distributor — assessed “hybrid threat actor” Activity SEO-poisoned fake installers deliver Ghost and the MODBEACON Rust trojan Targets…

How PyHunter finds the taint path that turns a poisoned web page into id; whoami; echo PWNEDBYRESEARCHER

How three zero-days in a travel router chained together into unauthenticated remote root — and what it says about the “privacy on the go”…

Machine details