1. The 30-Second Refresher: What an Open Redirect Is

I built a Python tool that detects SSH brute-force attacks in real time and automatically blocks the attacker’s IP using iptables — running…

Introduction

“@ ” is published by Vijamgk.

30-second version: I compared the RCE reports that defined 2018–2021 bug bounty with what’s getting disclosed in 2024–2026. The attack…

A technical walkthrough of deobfuscating JavaScript, dumping EVM bytecode, and resolving blockchain command and control infrastructure.

Room: Hacker Holidays 2026, Day 12: After Hours Difficulty: Beginner to Intermediate Environment: Kali Linux

A Step-by-Step Reconnaissance Walkthrough

Why I built an open-source RLS auditor after years of breaking into Supabase apps for a living.

The One Sentence That Explains Everything

Authority e o cutie AD unde furi secrete Ansible Vault, păcălești un PWM să dea o parolă LDAP în clar, apoi abuzezi ESC1 spre Domain Admin.

🎯 The Mission

In this challenge, a seemingly harmless web server exposed a configuration file containing SSH credentials. Those credentials granted…

It’s the last day of Hacker Holidays 2026! Though I’m sad to pack up and head home from the Byte Lotus, I sure learned a lot. Here’s to one…

Introduction

“Do Not Disturb” is published by Harshikachauhan.

“Overheard at Breakfast” is published by Harshikachauhan.

Scann

Active Reconnaissance Basics

Cloud Capture-the-Flag (CTF) challenges are a great way to learn how small cloud misconfigurations can combine into a full compromise. This…