LDAP -> SSH -> ROOT

i met with a really Briliant hacker i know built a machines CTF challenge to host a CTF competetion ,and told me about the machine he built…

https://tryhackme.com/room/grandlarcenyautoii

Most of the privilege-escalation advisories in this batch share a boring prerequisite: you already need high-privileged access to reach the…

Welcome to this new Medium post. This one starts a series where we build a basic EDR driver from scratch to understand how EDRs collect…

We can all learn a lot from nature. Recently I saw the amazing documentary My Octopus Teacher, wherein a diver befriended a common octopus…

When we think of massive data exposures, we typically picture dark web leaksor ransomware extortion. But some of the most extensive…

A beginner-friendly step-by-step TryHackMe walkthrough covering enumeration, steganography, password cracking, and a real sudo CVE exploit.

SNMP -> SSH -> ROOT

A walkthrough of a GraphQL API assessment on a business application handling employee, product, and customer data — six confirmed findings…

Forget password strength for a second. A currently active WhatsApp scam doesn’t need your password at all , it just needs you to type six…

You are not as private as you think you are. Not because you are sloppy. Because you have been posting for 10 years and the internet has…

Password reset functionality is a critical part of any authentication system, but if it’s not implemented securely, it can easily become an…

section 1 :

Hello everyone! While studying the Dota 2 cheat market, I came across an article by author mrkhertz titled “Top hacks for dota 2. Best…

As frontier models slap on more classifiers to prevent cyber abuse, attackers and defenders are forced to switch to open weight models…

AI, Social Engineering, Prompt Injection, LLM Data Leakage

The Chinese threat group Jewelbug has repurposed a single piece of infrastructure to serve two distinct objectives simultaneously: surveilling government organizations and profiting from cryptocur…