A walkthrough of the second box in VulnHub’s DC series where the real vulnerability wasn’t WordPress itself, but everything built around…

That’s The Ticket — TryHackMe WriteUp with Flags Date: 24/06/2026 Room Link: https://tryhackme.com/room/thatstheticket My Profile: https://tryhackme.com/p/RayenHafsawy 🧭 Introduction This room …

The room in question Here.

Brute forcing

Hi everyone! 👋

# Password Reset Vulnerabilities Password reset functionality is one of the most sensitive features in any web application. If there’s a mistake in how it’s implemented, it can easily lead to …

I don’t stockpile canned beans, but I am a digital prepper.

Your password is worth almost nothing to a hacker anymore. Your session cookie? That’s the crown jewel.

Measuring human risk by mechanism, not magnitude

Cyberattacks rarely happen in a single step.

Threat intel flagged an APT group, IronShade, actively targeting Linux servers across the region. Instead of waiting to become a victim…

Welcome to this new Medium post. In this one, we will talk about direct $MFT parsing, a technique to enumerate every file on an NTFS volume…

When I started this project, my instinct — like most people learning detection engineering — was to think about correlation first. It felt…

It is always exciting to get some new opportunities when you are a developer. New clients, projects, and even chances to work with people…

Introduction

Task 1 Deploy Deploy the attached VM — no answer needed Task 2 Introduction When it comes to hacking, knowledge is power. The more knowledge you have about a target system or network, the more …

In Part 1, I walked through the architecture of Z3R0-RECON at a high level. This time, we go under the hood — the actual code behind the…

So it’s rapey incels v caped crusaders at present.

All about Hashcat Masking

A few months ago, I decided to go back to the fundamentals.