In this session, we take on the Mr. Robot (Red Team) role and simulate a data destruction attack, specifically a ransomware attack —…

Directory, Version Enum, RCE, Privilege Escalation.

Now that you understand the basics, let’s explore advanced CRLF injection techniques and filter evasion methods. WAFs and input…

This blog discusses several Windows persistence techniques that can be used after gaining initial access, before your C2 callback dies on…

A practical walkthrough of catching packed malware in the act, without having to reverse every last instruction.

Giriş

Giriş

Detection engineers often face a common challenge:

What’s the idea?

PicoCTF—SQLiLite: Web Exploitation (Medium difficulty, 300 pts)

Spoiler / TL;DR: In June 2023, a small satellite named Moonlighter was launched into Earth orbit aboard a SpaceX rocket — and its sole…

What Happens When You Visit an HTTPS Website?

Hello! I am currently working toward my SAL1 certification and plan to write up the 12 CTFs featured in the course, as well as the two SOC…

Intro

An anonymous attacker could fully enumerate, read, and overwrite the production customer-service attachment bucket of a major insurer’s…

In the realm of web application security, Insecure Direct Object Reference (IDOR) stands out as a critical vulnerability that often goes…

Did you know that the average time a person spends online has doubled since 2014, while the complexity of digital attacks has grown by…

Most of the internet still runs on decades-old assumptions about trust, patching, and physical isolation. That gap — not raw talent — is…

This is the thirrd room of the Wireshark phase of my using TryHackMe rooms to train my SOC brain by understanding through practice how to…

Hassan Elsayed