Step 1 - zigzag like a crocodile:

Have you ever used an app or website where the “Session Expired” happens after a while of inactivity? Yes, this is the problem with Token…

GNU C Library 2.42 is out, bringing ISO C23 support, enhanced malloc caching, SFrame stack tracking, and detection for new Intel & IBM z17 processors to Linux.

Máquina: TIME Dificuldade: Difícil Plataforma: HackingClub

Upon visiting https://mercury.picoctf.net:53929/index.html, we are presented with a minimal webpage. It contains a single input field and a…

هک کردن یکی از جذاب‌ترین مباحث روز کامپیوتر بوده و صحبت درباره برترین هکرهای دنیا همیشه داستان‌های هیجان‌انگیزی را به همراه دارد.با معرفی 4 هکر برتر دنیا همراه من باشید. هکر ها از باهوش ترین افراد…

Finding My True Passion

In this walkthrough, we’ll exploit multiple vulnerabilities in the Injectics machine on TryHackMe. The machine involves common real-world…

A hop, a skip, and a cleverly placed trap

Memory Dump  — Ram Dump

The very app that promised to protect women from dangerous men has become the danger itself.

In nature, predators use watering holes as an opportunity to strike. Online, scammers can do the exact same thing, which is why the more…

As a student pursuing Linux system administration and offensive security, I quickly realized the power of Bash scripting. Simple scripts…

How to protect your software pipeline from tampering, threats, and third-party risks in 2025

Hacking Web Applications

Step 1 —we gonna take it down like three bowling balls

Step 1 — respond to me

ArmouryLoader is a highly sophisticated malware using OpenCL GPU decryption and advanced obfuscation to bypass EDRs, gaining privilege escalation by hijacking ASUS Armoury Crate.

Cyfirma reveals Raven Stealer, a new, lightweight MaaS infostealer built in Delphi/C++, using reflective process hollowing and Telegram bots for stealthy data exfiltration from browsers.

Evilent, a new PoC tool, exploits the Windows Event Log service to coerce connections to an attacker-controlled SMB share, potentially leaking NetNTLMvLMv2 credentials from antivirus scans.