A writeup for “Brr” on TryHackMe.

Overview

From an open Squid proxy to root via PATH hijacking in a misconfigured cronjob

Background:

Security doesn’t begin when a request reaches your Mule application. It begins much earlier — at the point where the request first enters…

Learn what SSRF is, how it works, common attack scenarios, how to identify it during authorized security testing, and how developers can…

Redacted writeup. Program and target withheld per disclosure policy

Hi, I’m mrx_w_ (Adem Ziane Berroudja), a bug bounty hunter on Bugcrowd. You can find me on Twitter and LinkedIn under mrx_w_. In this…

A beginner-friendly look at how improper file handling allows attackers to bypass security and wander through a web server’s restricted…

A husband or wife who thinks their spouse is cheating on them might be tempted to investigate and figure out what is going on. These days…

How Do Private Investigators Catch Cheaters? Key Techniques for Infidelity Investigations

A better approach is to learn it in a structured order. Here’s a roadmap that explains what each part is, why it matters, and the common…

Every penetration test begins with a single objective: understand the target before attempting any exploitation. Without proper…

This walkthrough details the forensic investigation of a macOS machine compromised by a fake recruiter phishing campaign targeting a game…

How a single spoofed header walks straight past a Next.js login wall

About This Write-up Series

In April 2026, security researchers uncovered a massive Vidar stealer campaign distributing data theft and cryptocurrency mining tools. Attackers used oversized files and fake certificates to tric…

At a glance Actor UNK_MassTraction — suspected China-aligned espionage cluster Activity Roundcube exploitation for credential theft, webshells, and the VShell backdoor Targets Physics and engineer…

Subtitle:

TL;DR: Many organizations run unprotected syslog listeners on port 514. I built a tool that exploits this through IP spoofing and…

“You just landed in an internal network. You scan the network and there’s only the Domain Controller…”