Every weekend, I have mentoring calls with people trying to break into cybersecurity.

Introduction

Here is your comprehensive guide to mastering FFUF.

The beachside guest-experience build shipped on a deadline, and the night-shift developer wired the “jukebox straight into the floor with…

En esta maquina veremos estos metodos de Explotacion a esta maquina

Challenge description: A captured herald answers every petition in flawless, loyal words, yet Miren Vale keeps finding its secrets for sale…

The most important thing to understand about ransomware in 2026 is not a strain or a payload. It is an economy, and it behaves more like a s

Beach Bar Walkthrough

Same drill as ItsyBitsy, different SIEM this time — Splunk instead of Kibana, and a compromised HR host to untangle. Let’s get into the…

A super simple guide on how a tiny mistake by a web developer helped me solve Room 404 on TryHackMe.

En esta maquina veremos estos metodos de Explotacion a esta maquina

Lab Overview

At a glance Actor Mirage Kitten (also UNC1549, Smoke Sandstorm, Nimbus Manticore) Activity State-aligned cyber espionage and long-term network access Targets Aviation, defense, telecom, government…

CVE-2026-16347 lets attackers brute-force MikroTik RouterOS logins for unauthorized system access. Rated CVSS 8.8, with no fix yet. Apply mitigations. #MikroTik #RouterOS #CVE202616347 #BruteForce…

Introduction

A CTF Walkthrough on Insecure PyYAML Deserialization (yaml.load), Web App Enumeration, and Linux Process Reconnaissance.

Following the clues behind a covert HTTP Cookie exfiltration channel in a TryHackMe forensics challenge

Subdomain takeovers are one of those vulnerabilities that sound simple in theory but pay well in practice — and I recently found one on a…

alg=none x Attacker-Controlled Object Check

Exploring the Defensive Value of Modern Command-and-Control Research for Blue Teams, Red Teams, and Threat Hunters