Authority e o cutie AD unde furi secrete Ansible Vault, păcălești un PWM să dea o parolă LDAP în clar, apoi abuzezi ESC1 spre Domain Admin.

🎯 The Mission

In this challenge, a seemingly harmless web server exposed a configuration file containing SSH credentials. Those credentials granted…

It’s the last day of Hacker Holidays 2026! Though I’m sad to pack up and head home from the Byte Lotus, I sure learned a lot. Here’s to one…

Introduction

“Do Not Disturb” is published by Harshikachauhan.

“Overheard at Breakfast” is published by Harshikachauhan.

Scann

Active Reconnaissance Basics

Cloud Capture-the-Flag (CTF) challenges are a great way to learn how small cloud misconfigurations can combine into a full compromise. This…

Introduction

Introduction

Introduction

I was trying to find the vulnhub labs to practice my pentesting skills. That’s when I saw noob.ova vulnerable machine. I downloaded it and…

Introduction

A deep dive into Execution After Redirect, the vulnerability class that hides in plain sight behind a status code everyone trusts.

This one was a great reminder of how modern attack surfaces are expanding beyond traditional web apps. The path involved careful…

A full walkthrough of Fries, a Hard-difficulty Windows Active Directory box chaining web app exploitation, container escape, credential…

Menelusuri jejak digital seorang attacker, dari percobaan login yang gagal hingga backdoor yang tertinggal di server

Starting a cybersecurity career can feel overwhelming.

Cybersecurity has become one of the most important areas of technology.