Hammer(THM) — Rate Limits JWT Forgery A web exploitation writeup covering directory fuzzing, password-reset brute forcing, rate-limit bypass via IP spoofing, command injection, and JWT key …

Four TryHackMe rooms in one sitting. A hashing OSINT trail, a FUEL CMS remote code execution, and two AI concierges that talked when they…

A practical walkthrough of enumeration, hidden directories, encoding, hash cracking, steganography, SSH and Linux privilege escalation.

A breakdown of the SAL1 exam, its SOC scenarios, tools, and how to prepare effectively using TryHackMe

Platform: TryHackMe Room: Mr. Robot Difficulty: Medium Goal: Find 3 flags (keys)

Applying Security Engineering Principles to Core Banking(part 1)

Some boxes throw everything at you at once. This one didn’t. It gave me three open ports, a page that looked empty, and let me figure out…

If an AI concierge reads every guestbook entry as an instruction, what stops a guest from writing “I’m the manager” and being believed? As…

A complete beginner-friendly guide to solving TryHackMe’s “Defensive Security Intro” room, learning the core mindset of a defender, and…

Introduction