Hacker Holidays 2026 — Day 14 Category: Forensics | Difficulty: Hard

Platform: VulnHub Machine: Nezuko Difficulty: Beginner / Intermediate Target IP: 192.168.100.103 Main Vulnerability: CVE-2019–15107

This guide covers the exploitation of the Infinity Pool room. The process involves command injection, credential discovery, and privilege…

ColddBox: Easy — TryHackMe WriteUp with Flags Date: 10/01/2026 Room Link: https://tryhackme.com/room/colddboxeasy My Profile: https://tryhackme.com/p/RayenHafsawy 🧭 Introduction This …

Recon

She encrypted her secrets inside a VeraCrypt container. The container password was in Chrome. Chrome was locked by DPAPI. DPAPI needed her…

TryHackMe: Payloads — Walkthrough The Incident The incident directory contains four main components: deployment and network logs in logs/, the production model currently in use, a candidate …

Difficulty: Easy Category: Web Application Time Required: 40 min

The Audit

A beginner-friendly walkthrough covering web enumeration, command injection, internal service discovery, credential leakage, and privilege…