No certificate pinning, leaked API keys, and a password hash in the login response. The static pass said the traffic would be trivial to…

I’m back lol, this time with a web pentest room — Recruit. Here’s the challenge description:

Hello! This is my 2nd of 12 CTF write-ups under the SOC Level 1 Series, this being called Eviction. This CTF requires knowledge about the…

As defenders, we analyze more than logs and network traffic.

Why this matters

بسم الله الرحمن الرحيم الحمد لله، والصلاة والسلام على رسول الله.

En las últimas semanas circuló en la comunidad de ciberseguridad la afirmación de un investigador que asegura haber desarrollado un método…

Hey everyone! 👋

The goal of this room is to exploit a vulnerable Windows machine affected by the EternalBlue vulnerability (MS17–010), gain SYSTEM…

Why I built a hybrid passive + active recon engine instead of chaining five different tools

lap link:https://tryhackme.com/room/metasploitintro

Giriş

Giriş

How two requests to the same endpoint let me inherit an administrator account.

In the previous article, we explored Passive Reconnaissance, where information is collected without directly interacting with the target…

What this question reveals about privacy, desperation, and our strange idea of what programmers actually do

Welcome to this new Medium post! In this one, we will explore a simple yet effective virtual machine detection technique based on MAC…

In this room , we will chain a series of vulnerabilities in order to make our first foothold on the system then escalate our privileges to…

Want to hear some lo-fi beats, to relax or study to? We’ve got you covered!