TryHackMe’s Easy Peasy requires a systematic approach. It forces you to combine multiple fundamental techniques — web enumeration…

A Security Operations Center receives alerts every day.

Picture a Mac with Screen Sharing enabled years ago — just a VNC password, no Apple ID, no local account tied to it. Harmless, right?

One night, I got curious.

Cybercrime rises every year, and businesses now hire security experts to test their systems before criminals do. This practice, known as…

How a protected dev site became publicly accessible because authentication existed only at the CDN edge.

Note: the real domain is redacted throughout this write-up and replaced with example.com.

Summary

بسم الله الرحمن الرحيم، والصلاة والسلام على أشرف المرسلين سيدنا محمد ﷺ.

A quick-reference guide to the specific headers, payloads, commands, and logic bypasses featured in the writeups.

Why stealing a session can be more valuable than stealing a password.

Engagement Overview

How a misconfigured BIND server exposed credentials and led to complete system compromise.

Wazuh is one of the most popular open-source Security Information and Event Management (SIEM) and Extended Detection and Response (XDR)…

Natas 0 → Natas 1

A rewards system let you claim 50 points every 24 hours. We claimed it three times in the same millisecond. Welcome to race conditions.

Query five record types for a domain, decode an SOA field by field, and attempt a zone transfer, so you know what a domain publishes to…