DC-2, much like its predecessor DC-1, is a beginner-friendly VulnHub challenge created by DCAU. It’s designed to teach aspiring pentesters…

In this walkthrough, we’ll explore the exploitation process for the Aragog CTF challenge, including discovery, enumeration, foothold…

In this walkthrough, I’ll share how I approached and solved the Corrosion2 CTF challenge, detailing every step from discovery to privilege…

Previously I had done a very similar writeup but it was in Windows. This time its in Linux. HTB CDSA includes both a Windows and Linux…

Step-by-step guide to exploiting Windows AD, capturing NTLM hashes, and escalating to administrator on Hack The Box Fluffy.

### Task 1: Which is the highest open TCP port on the target machine?

Welcome to another Hack the Box walkthrough. In this blog post, I have demostrated how I owned the Eureka machine on Hack the Box. Hack The…

1.Enumerate TCP ports:

I will cover solution steps of the “Dancing” machine, which is part of the ‘Starting Point’ labs and has a difficulty rating of ‘Very…

Step-by-step guide to exploiting XWiki 15.10.8 on Editor HTB, from initial RCE to user and root privilege escalation

Begin with an nmap scan which reveals that the ip has port 80 open which means there is a web app running.
Append the domain…

Brutus HTB — Digital Forensics & Incident Response (DFIR) Writeup

Intro: So, this is the my first ever HTB challenge write-up — I am planning to post atleast 2 or 3 write-ups every week. Apologies in…

Phishing is one of the oldest tricks in the hacker’s playbook — but it’s also one of the most effective. Even in 2025, phishing emails…

Open-Source Intelligence (OSINT) is one of the most exciting areas in cybersecurity. Whether you’re a penetration tester, an ethical…

From Breaking Systems to Building Shields How I Turned Curiosity Into a Force for Good

In today’s digital age, ethical hacking is one of the most in-demand skills. Ethical hacking course teach individuals how to identify and…

In today’s digital world, large-scale systems like social media platforms, online marketplaces, and SaaS applications face the challenge of…

A practical, copy-paste guide to registering S3 snapshot repositories and creating snapshots on Amazon OpenSearch — using cURL, Postman…

A hands-on guide to signing AWS API requests with SigV4 — how it works, when to use it, and paste-ready examples.

A Deeply Un-boring Dive into the New Rules for API Protection