TL;DR Ruby on Rails has patched a critical Rails Active Storage flaw. Tracked as CVE-2026-66066 and rated 9.5 CVSS, it lets an unauthenticated attacker read arbitrary files from the server. Stolen…

Understanding how services act on behalf of users — theory, configuration, real-world scenarios, and how attackers abuse each type

Stop Running Tools Blindly — Start Seeing Attack Paths Inside Active Directory

TL;DR: A critical Rails Active Storage RCE flaw, CVE-2026-66066 (CVSS 9.5), lets an unauthenticated attacker read server files and potentially run code through crafted image uploads. A public Meta…

On January 29, 2026, I celebrated my birthday by making a promise to myself: I would pass the Practical Network Penetration Tester…

Introduction

A walkthrough of Inlanefreight’s Active Directory environment — from an exposed file upload vulnerability to full domain compromise.

Introduction

Introduction

Active Directory From Zero to Hero - Part 1