A hands-on walkthrough of a realistic web application penetration test, covering reconnaissance, IDOR, account takeover, unrestricted file…

Gatekeeper is a Windows binary-exploitation box built around a custom TCP service that is vulnerable to a classic stack buffer overflow. An…

Difficulty: Easy | Type: Web Enumeration / Git Source Code Disclosure

Difficulty: Easy | Type: Prompt Injection / LLM Jailbreaking

I’ll be honest — the first two rooms of TryHackMe’s Hacker Holidays felt like a nice warm jog. Room 3, the Complimentary challenge, felt…

Tiny packets, odd hours, suspiciously regular. That’s basically the polite way of saying someone’s been smuggling data out every night…

Executive Summary

Learn how security professionals use the Dig tool to understand DNS, perform reconnaissance, and gather valuable information before a…

New to web security? Learn the OWASP Top 10:2025 vulnerabilities in plain English, with real examples, prevention tips, and career guidance…

Cybercriminals now possess a proprietary tool to simultaneously strike workstations, Linux servers, and corporate virtual infrastructures. Hackers already deploy the new GenieLocker ransomware aga…

Part 6 of the “Implementing DevSecOps” series

Hello folks! Today we’ll be discussing about one more CTF challenge of the module Host and Network Penetration Testing and the sub module…

Description : He booked the quiet room. It’s not on the floor plan, not in the brochure, not on any door. But port 8080 is wide open, and…

In this challenge, our goal is to investigate the Byte Lotus Hotel. We begin with the promotional brochure, but it seems that its hero…

DearQA — TryHackMe WriteUp with Flags Date: 27/01/2026 Room Link: https://tryhackme.com/room/dearqa My Profile: https://tryhackme.com/p/RayenHafsawy 🧭 Introduction This room strips binary …

Solution:

Cyber security has become one of the fastest-growing career fields in India. As businesses move their operations online and cyber threats…

“SQL Injection? Isn’t that a vulnerability from 2005?”