Room: CryptoCabana Category: Cloud Difficulty: Medium

A modern SOC can generate millions of security events every day.

Server-Side Template Injection (SSTI) occurs when user-controlled input is processed by a server-side template engine as template code…

Publicly Exposed Prometheus Metrics & Debug Information in a Telekom IoT API

The “Infinite Money” Glitch

On July 11, 2026, at 22:13 UTC, an attacker began draining liquidity pools on BlueMove DEX, a Sui-based AMM. Within 23 minutes…

Metasploitable 1: Be a Telnet Master

PicoCTF — Investigative Reversing 0 & Investigative Reversing 1

How combining episodic meta learning with Mahalanobis distance let a network classify attacks from a handful of examples and flag ones it…

CISA Confirms: SonicWall SMA1000 Vulnerabilities Are Now Being Exploited to Deploy Ransomware

JWTs (Json Web Tokens) is basically a digital token that allows a server to identify an authenticated user without asking for the username…

https://tryhackme.com/room/hh-towelonthesunbed-61271709

Testing the YAML Import Function

A beginner-friendly walkthrough of how directory enumeration exposed source code, Git history, and a secret left behind in an old commit.

Welcome to this new Medium post. In this one we will see how to walk the Windows VAD tree from a kernel R/W primitive, and how to abuse…

The model completes 95% of exploit-development requests that its own safety guardrails normally block, and OpenAI says it’s already used it…

In 2026, the most dangerous cyberattack isn’t the one that overwhelms your defenses. It’s the one that completes its mission while you’re…