Concierge Briefing

WebGPU Gives Websites Access to Your GPU. So Why Can’t a Page Read Your VRAM?

TryHackMe | The Hollow Shell

Author: Nilanjan Chowdhury

Link : TryHackMe | Towel on the Sunbed

Most Kali hardening guides fall into one of two traps. Either they hand you a paranoid checklist of forty things that make the machine…

How a form parameter that never touches <script> tags can still execute arbitrary JavaScript — and why blacklisting < and > isn't enough.

Cyber Insights with Folashade Social Engineering: The Human Side of Cyberattacks Cybersecurity is often associated with hackers, malware, firewalls and sophisticated attacks. But there is another …

Category: AI Security / Social Engineering / Web
Difficulty: Easy
Vulnerability: Prompt Injection (LLM Trust Exploitation)

Exploiting Local File Inclusion and a Zip Slip Vulnerability to Gain Remote Code Execution on the Target Server

The scenario

During our Day 10 of Hacker’s Holidays we’ll exploit a Zip Slip vulnerability in a hotel’s file upload portal, using path traversal to drop…