In an era defined by persistent cyber threats and rapidly expanding digital footprints, the traditional approaches to vulnerability…

In an increasingly complex and interconnected digital landscape, proactive cybersecurity measures are paramount for organizational…

Hack into a vulnerable database server with an in-memory data-structure in this semi-guided challenge!

I was privileged to be able to participate int Catreloaded 2025 CTF and in this writeup I will show the solution to the challenges which I was able to solve when we open the challenge we are prompted…

Exploiting Insecure Direct Object Reference and Linux Capabilities through Privilege escalation using Linpeas in the Cap HackTheBox machine

The digital landscape continuously evolves, making robust vulnerability assessment more critical than ever before. As organizations face…

APPERENTICE-PRACTITIONER Labs

A critical vulnerability in the Directus API (CVE-2025-55746) allows unauthenticated attackers to silently upload and modify files, leading to webshells and RCE.

A new report reveals a stealthy attack on GeoServer using a critical RCE flaw. Instead of ransomware, attackers are hijacking servers to earn passive income.

A new report from HarfangLab details two recent UAC-0057 (Ghostwriter) campaigns targeting Ukraine and Poland with malicious archives and multi-stage implants.

A critical flaw in the widely used sha.js library (CVE-2025-9288) can lead to hash collisions and private key extraction, threatening web applications.

UNC5518 is using "ClickFix," a new technique that weaponizes fake CAPTCHAs to trick users into launching malware and providing access to other criminal groups.

A new report reveals a sophisticated spear-phishing campaign targeting finance executives. The attack uses social engineering and legitimate tools to evade detection.

Aprende a usar FOFA para el reconocimiento de activos, búsqueda de vulnerabilidades y programas de Bug Bounty.

This is why the demand for a hire a hacker service has increased dramatically. Contrary to popular belief, these services aren’t limited to…

Harnessing Threat Intelligence to Enhance Synergy Across Security Products

For those who don’t know, a HomeLab is a setup that you make at home for learning and experimenting with technology. Although companies…

The dark web is often portrayed as a thriving underground economy where illicit goods and services are only a few clicks away. Counterfeit…

Some people chase another shiny logo to add on LinkedIn. I found in CPTS an exam that almost broke me… and in the end, made me grow.

Algunos buscan sumar un logo más a LinkedIn, yo encontré en el CPTS un examen que casi me rompe… y que al final me hizo crecer.