I thought the hard part of red teaming would be memorizing tools and commands. Turns out the real improvement came from understanding how…

SOF-ELK is a pre-built Elastic Stack VM created for DFIR work, packed with parsers for common log types (HTTPD/web, proxy, Windows Event…

Category: Forensics / Windows / Cryptography Difficulty: Medium Target: KAPE triage collection from Room 214’s abandoned laptop (user…

Platform: VulnHub Machine: Nezuko Difficulty: Beginner / Intermediate Target IP: 192.168.100.103 Main Vulnerability: CVE-2019–15107

Como substituir uma VM completa por um Kali no WSL2 e usar o Dante para permitir que navegadores do Windows acessem redes internas de VPNs…

Introduction

scriptCTF Writeups 2026 Writeups for Geo-Osint, Forsenics, and MISC challenges in cybersecurity.

Imagine sending a WhatsApp message to someone in another country and receiving a response within seconds.

TL;DR Three critical Wazuh manager vulnerabilities now have public advisories and proof-of-concept exploit code. Each scores CVSS 9.1 and abuses the cluster protocol. Any peer holding the shared F…

TL;DR A critical flaw lets a low-privileged Rancher user seize full control of the platform. Tracked as CVE-2026-44945, it scores 9.1 on CVSS. This Rancher privilege escalation stems from a cross-…

Seven investigations. One certificate. Here’s what every module taught me about real SOC work.

Between July 16 and August 4, 2026, four organizations published incident reports about AI agents breaking into systems they weren’t…

Plaintext .env files are a narrow but real exposure — committed to git, synced to cloud storage, indexed by backup tools.

Introduction

A deep dive into upgrade governance, timelocks, and why “zero delay” is never just an architectural choice.

Flutter Under the Hood, Part 7 of 9: WebView bridges, deep links and exported components. The attack surface that has nothing to do with…

In this article I will demonstrate how poor dynamic group membership rules could be exploited by hackers in order to enumerate and escalate…

The AI was told it had no internet access. It didn’t believe that.

AI as Hackers vs Hackers with AI

Deep Dive: The Evasive Adversary — Insights & Defensive Playbook from CrowdStrike’s 2026 Threat Hunting Report Adversaries are no longer forcing their way through front doors. Instead, they are …

This time Drupal core isn’t the problem. A custom module with a SQL injection flaw opens the door, and a well-known Exim CVE closes it out.