Every few months a headline claims that quantum computers are about to break Bitcoin, Ethereum or your favorite DAO treasury. Some of these…

Introduction

A full writeup for the “Do Not Disturb” room, part of TryHackMe’s Hacker Holidays 2026 event (Boot2Root, Day 7) — covering NoSQL Injection…

Singapore penetration testing is a controlled cybersecurity practice used to identify vulnerabilities in systems, networks, and…

Overview

In today’s digital world, cybersecurity has become one of the most important and fastest-growing industries. From businesses and government…

The AI compute race and its commercial payoff are now showing up plainly in the numbers. Alphabet, the parent company of Google, recently released its fiscal 2026 second quarter results. The compa…

At a glance Malware family Unnamed cross-platform RAT (final payload “aone-cli”) Threat actor Unattributed; suspected Chinese-speaking actor Target Developers at Alibaba Group units, i…

Server-2 is a deliberately vulnerable web application designed for practicing User-Agent bypass, directory listing enumeration, CVE…

About Me

LinkedIn:- https://www.linkedin.com/in/vansh-rathore-cybersecurity/

Authentication is one of the first security controls users interact with, yet it’s often misunderstood. JWTs (JSON Web Tokens) are popular…

A client once asked me to demonstrate the risk rather than describe it. In the car park, before the engagement had properly started, I read…

A beginner-friendly walkthrough of a network credential attack in a safe lab environment.

A walkthrough of Inlanefreight’s Active Directory environment — from an exposed file upload vulnerability to full domain compromise.

Introduction

A beach bar jukebox app had a YAML import feature with zero sanitization. We went from login page to root shell in under 15 minutes.

Room: https://tryhackme.com/room/guidedpentestweb

A conversation overheard at breakfast leaked an email address. That email led to a forgotten Gravatar profile. That profile contained the…

Introduction