This machine is for more experienced web application testers and can be found here: https://tryhackme.com/room/support

access room: https://tryhackme.com/room/thecrownjewel

TryHackMe Walkthrough

In this article, we’re going to explore the very easy box of Meow, within HTB Starting Point — Tier 0.

How I Found Account Enumeration on Two Endpoints of a Social Platform A beginner-friendly security writeup | CWE-204 | Medium Severity What is Account Enumeration? Before we get into the findings …

by Ziad Mohammad — Bug Hunter & Security Researcher

A basic static analysis of Lab 1-1 from Practical Malware Analysis book covering imports, strings, compilation details and IOCs

While probing a smart-lock system for a high-security warehouse test, the tester’s laptop intercepts a local Wi-Fi handshake containing a…

Anonymity refers to the state of having one’s identity hidden and not visible to others. It is the desire to remain anonymous and not have…

RCE.Expoite

For teams weighing automated against manual pentesting: what each one finds, what each misses, and how to combine them sensibly

Penetration Testing & Vulnerability Assessments (UK Legal Frameworks)

Platform: PortSwigger Web Security Academy oracle-sql-injection-portswigger-writeup

Box: CVE-2024–48914 Difficulty: Easy

INTRODUCCIÓN

Welcome to this new Medium post, in this one I’ll show you how to identify a driver vulnerability that allows reading and writing arbitrary…

An interview-focused and exam-focused guide to CIA, IAM, NIST CSF, Security Controls, SOC, Incident Response, and DevSecOps.

Machine Information

TL;DR AMD has disclosed CVE-2026-43598, an AMD RCCL vulnerability rated 7.7 on CVSS 4.0. The flaw sits in the ROCm Communication Collectives Library and could let a compromised peer run code remot…

For tool-using AI systems, data credibility, instruction authority, and permission to act are three different decisions.

Platform: TryHackMe
Machine: Publisher
Focus: Web Enumeration, SPIP, AppArmor, SUID, Linux Privilege Escalation