A walkthrough of a TryHackMe AWS room exploring insecure Cognito Identity Pools and over-permissive DynamoDB access.

Room Link : https://tryhackme.com/room/hh-complimentary-05e0b604

Zero sign-up. Zero friction. And somehow it already has your data.

Introduction

Here is a quick walkthrough of a room for TryHackMe Hacker Holidays 2026, a 14-day cybersecurity challenge where a new room unlocks every…

This challenge demonstrates a common cloud security pitfall in serverless applications. Instead of exploiting a traditional web…

Link to the room: https://tryhackme.com/room/hh-complimentary-05e0b604

Back at it for round three, and this time the trail leads straight through Cognito’s back door — the one login screen we never actually…

Git never forgets, even when you rewrite history to make it look like it did

Beyond the gate with a cookie the server never verified

This room a cloud focused room .

SSRF stands for Server-Side Request Forgery. It’s a vulnerability where an attacker gets a server to make a request it shouldn’t — to an…

A few months ago, I was conducting a penetration test on an enterprise system belonging to a municipality. The goal was to assess different…

Hacker Holidays 3rd Room date : 30 July 2026

Day 3 challenge of Hacker Holidays focused on a common cloud security issue: an AWS Cognito Identity Pool misconfiguration.

You can play this room for free: “https://tryhackme.com/room/hh-complimentary-05e0b604”

Introduction:

This is the walkthrough of THM Hacker Holidays-Day 01(The Concierge Knows Too Much) room, which demonstrates the prompt injection…

A 5-minute visual walkthrough of unsanitized inputs, payload mechanics, and parameterized queries.

TL;DR Cisco is warning about a Cisco FMC vulnerability under active attack. Tracked as CVE-2026-20316, it lets a remote attacker log in using a hidden static account. Cisco confirms exploitation, …

If you hear “hacker” and picture someone in a hoodie typing furiously in a dark room, it’s time to update that image. There’s a whole…