CTF Name : Pickle Rick Plateform : TryHackMe Author : ZODiAK

Crack the Hash: A Beginner’s Guide to Hashing and Password Cracking

From a hidden stego passphrase to root, via SQL injection and an abandoned screen session.

Esse artigo é um write-up do desafio pwn108 da TryHackMe. Esse desafio faz parte da sala PWN101 de exploração de binários. O link da sala é…

It fits in your pocket, runs on a battery, and can audit a network without..

1. Who are SmatchoiceHackers? | The Global Elite Hacking Collective SmatchoiceHackers is a prominent, versatile network of professional…

CVE-2026–111497, Node.js’in bundle ettiği Brotli decoder’daki bir out-of-bounds write zafiyetidir. Node.js project bunu “remote code…

Ngl, sebelumnya aku mikir begini. Android kan udah punya banyak proteksi bawaan, jadi aplikasi apapun yang jalan di atasnya pasti ikut…

Task 3

PHP’de bulunan ve PHP2Shell adı verilen iki kritik güvenlik açığı, WordPress, Drupal, Joomla ve MediaWiki gibi PHP tabanlı sistemleri…

On October 21, Quest Diagnostics discovered unauthorized access to its Quanum Lab Services Manager (LSM) system. In a filing with the SEC, the lab giant said it believes “an unauthorized par…

TL;DR Oracle has issued an out-of-band Oracle Java security alert for CVE-2026-91403, rated CVSS 9.1. The update distrusts intermediate CA certificates tied to the eMudhra compromise in Java SE an…

TL;DR On October 22, 2026, Okta disclosed four Okta Access Gateway vulnerabilities in three advisories. They include the PHP2Shell flaws in its PHP runtime and a CVSS 9.1 command execution bug in …

TL;DR Trend Micro’s Zero Day Initiative (ZDI) posted details of several unpatched Linux kernel vulnerabilities to the public kernel mailing list on October 22, 2026. Two KSMBD flaws carry a …

TL;DR On October 22, 2026, CISA published advisory ICSA-26-295-01 covering nine Kiloview E3 vulnerabilities in the company’s NDI video encoder. Two command injection flaws score CVSS 9.9 and…

TL;DR HPE has patched 72 HPE Networking AOS vulnerabilities in its AOS-8 and AOS-10 wireless operating systems. They affect Mobility Conductors, Controllers, Gateways and Access Points. Of these, …

TL;DR Hakai Security has released a public proof-of-concept for CVE-2026-114509, a critical Laravel authentication bypass in the built-in TokenGuard. The flaw, rated CVSS 9.2, lets an unauthentica…

TL;DR Horizon3 has published a technical deep dive and proof-of-concept exploit for CVE-2026-106173, a critical FortiSIEM vulnerability rated CVSS 9.4. The flaw lets an unauthenticated attacker wr…

At a glance Actor Operator using the alias “k0t,” with suspected collaborators; possible initial access broker Activity Mass scanning, exploitation, and brute-forcing of network edge d…

Howdy cowboys! This write-up is a quick note about how and why I developed this tool. Although I’ve been using a version of this internally…

I woke up on Wednesday to a timeline full of the same three words: “patch PHP now.”