After compromising a machine and harvesting credentials (for example via LSASS scraping as in our previous article), the next step is…

UK retailers are facing a serious cyber crisis. 🛑 Major names like Marks & Spencer (M&S), Harrods, and the Co-op have been hit by a wave…

In today’s digital age, securing online accounts is more critical than ever. With the rise of cybersecurity threats, it’s essential to…

Handling Cross-Origin Requests

Introducing TrailAlerts: a serverless, open-source tool to define Sigma rules and get rich, customizable alerts from your AWS account.

Hey look! Another Network Foundations lesson from the Hack The Box Academy. This lesson is about Network Address Translation, or “NAT” if…

Imagine connecting to a Wi-Fi network that looks perfectly legitimate — same name, same signal strength — but it’s a trap. This is the…

OSEP is more of a marathon than a race. This post narrates my experience, contains advice for students, and a review of the course.

Back for another Hack The Box Academy fundamentals lesson! This time we are looking at good ol’ Dynamic Host Configuration Protocol (DHCP)…

You can find the complete collection of Sandfly related articles here:

And we’re back with another Network Foundations lesson with the Hack The Box Academy. Today, we are going over the basics of Network…

Hi, I’m Prashant Kamkar, a cybersecurity enthusiast, occasional bug bounty hunter, and automation enthusiast. I love building things that…

Functions are the building blocks of any Python program. But writing better functions — those that are readable, maintainable, and…

Learn how attackers can escalate privileges in Google Cloud by exploiting misconfigured function role to gain Owner-level access

How hackers exploit the web’s most basic protocol — and how a little “S” makes a big difference.

In May 2025, aerospace and defense supplier RTX Corporation agreed to pay an $8.4 million settlement over allegations that its former…

Staying on top of cybersecurity news by chasing down daily headlines from multiple sources can be exhausting. So, I built a slick little…

The main idea when we speak about Single sign on and the whole concept of that is a user can enter one set of credentials and magically…

The DeFi space has encountered yet another protocol breach.

So you want to hack an AI? Or more specifically, a Large Language Model (LLM)? Whether you’re a seasoned pentester or just LLM-curious…