Introduction

A beginner-friendly walkthrough demonstrating web application enumeration, Python YAML deserialization vulnerabilities, interactive reverse…

Track down the AWS mechanism issuing you credentials behind the scenes.

They provided a .pcap file.

TryHackMe

A cold storage device has two puroses: 1) to generate a secure seed phrase and 2) to keep that seed phrase isolated from your PC/mobile…

How Hackers Find Weak Spots: A Simple Guide for Beginners Have you ever heard that a company was hacked and wondered: "How did the hackers even get in?" Many people think hackers just sit in a dark …

Welcome to this new Medium post, in this one we will see a remote process AMSI bypass that does not touch AmsiScanBuffer directly. Instead…

App name and package identifiers below have been redacted or replaced with placeholders. Techniques and code are real and unmodified from…

Identifying hidden endpoints and parameters using Param Miner, Sniper, and content discovery tools.

How attackers, researchers, and red teamers use GitHub’s own search engine to uncover exposed API keys, credentials, and secrets before…

A practical introduction to building a repeatable search-query workflow for bug bounty and security testing.

Most bug hunters treat every web server the same. Point the same wordlists, throw the same payloads, move on. But the moment you confirm…

Exploring how Zigbee, Bluetooth, Wi-Fi, LoRa, and proprietary protocols coexist — and where security gaps emerge.

El caso de Bearlyfy/Toy Ghouls demuestra que el cifrado es apenas la fase final de un ataque. Antes de desplegar ransomware

The content in this article is written for educational purposes only and is to be practiced with consent. No material is to be replicated…

Do Not Disturb: A walkthrough of THM Hacker Holidays - Day 7 Here is a quick walkthrough of a room in the TryHackMe Hacker Holidays 2026, a 14-day cybersecurity challenge where a new room unlocks …

Introduction

The CVE WATCHTOWER logged 2,077 new vulnerabilities between July 27 and August 2, 2026. This CVE weekly roundup breaks down the numbers, flags what is under active attack, and highlights the entri…

TL;DR TP-Link patched a serious TP-Link TL-WR940N flaw, CVE-2026-12935. The bug allows unauthenticated remote code execution on the v6 router. It carries a CVSS 4.0 score of 8.7. No in-the-wild ex…

TL;DR A critical SQL injection flaw hits Weidmueller PROCON-WEB SCADA. Tracked as CVE-2026-16462, it scores a CVSS of 9.8. A remote, unauthenticated attacker can run arbitrary SQL commands on affe…