In the previous write-up I concluded 13-day long exploitation of juice-shop. Feel free to check them out.

Platform: Blue Team Labs Online Lab: Fungames

A few days ago, I was performing a security assessment on a foreign Learning Management System (LMS) platform. The application was…

One Number Was All It Took

by Bishal

A walkthrough of the second box in VulnHub’s DC series where the real vulnerability wasn’t WordPress itself, but everything built around…

That’s The Ticket — TryHackMe WriteUp with Flags Date: 24/06/2026 Room Link: https://tryhackme.com/room/thatstheticket My Profile: https://tryhackme.com/p/RayenHafsawy 🧭 Introduction This room …

The room in question Here.

Brute forcing

Hi everyone! 👋

# Password Reset Vulnerabilities Password reset functionality is one of the most sensitive features in any web application. If there’s a mistake in how it’s implemented, it can easily lead to …

I don’t stockpile canned beans, but I am a digital prepper.

Your password is worth almost nothing to a hacker anymore. Your session cookie? That’s the crown jewel.

Measuring human risk by mechanism, not magnitude

Cyberattacks rarely happen in a single step.

Threat intel flagged an APT group, IronShade, actively targeting Linux servers across the region. Instead of waiting to become a victim…

Welcome to this new Medium post. In this one, we will talk about direct $MFT parsing, a technique to enumerate every file on an NTFS volume…

When I started this project, my instinct — like most people learning detection engineering — was to think about correlation first. It felt…

It is always exciting to get some new opportunities when you are a developer. New clients, projects, and even chances to work with people…

Introduction