By Tejashri Godase

Introduction

Executive Summary

Disclaimer: This article is intended strictly for educational purposes and authorized security testing. Only perform these techniques…

Not all hackers are criminals. They are grouped by intent into types like white hat, black hat, and grey hat, plus others such as blue hat…

1. The Discovery: Finding Secrets in the JS Bundle

What’s up everyone! Nitin here 👋

Introduction:

In this walkthrough, I will go through the steps I took to compromise the TryHackMe Skynet machine. The attack involves SMB enumeration…

Exploring the Future of AI Agents, Foundation Models, and Security Automation

The blind spot in current AI guardrails

How a default Drupal install, a leaked config file, and a misconfigured SUID bit added up to a full root compromise.

I Chained Four Privilege Escalation Bugs to Root a Box — Here’s the Full Breakdown If you’ve ever felt stuck at "I got a shell, now what?" — this one’s for you. I just published a …

Telegram's t.iss.one links stopped resolving after the .ME registry applied serverHold. The app still works, while the reason for the domain action remains unknown.

Corporate storage systems are rarely taken offline unless the risk is serious. Progress Software has asked customers to shut down their ShareFile Storage Zone Controller servers immediately. The r…

The Initial Compromise and Detection A stolen package registry key enabled a cybercriminal to execute a severe jscrambler supply chain attack. They successfully uploaded five infected versions of …