TLDR: Foothold — web service default creds + PHP file upload vuln; Privesc — switch user default creds + sudo -l

Let’s be honest: cybersecurity looks like a dragon guarded castle to most beginners. Port scans roar. Exploits breathe fire. And every…

The crypto world in 2025 has been nothing short of eventful. While we’ve seen exciting innovations in decentralized finance, blockchain…

When I watched Mr. Robot for the first time, it didn’t feel like just another thriller. It felt like someone had cracked open my brain…

A Retiree’s Fight After Hackers Took His Life Savings

The last few months I couldn’t go as far with my studies due to health issues. Without going into too much detail, dealing with a serious…

Introduction

I received this email from an email address that could definitely fool a bunch of people without looking further into it. The email address…

After pulling raw data, was able to spot a few differentiators that stood out. Pulled the IP and ran it across abuseipdb and got minimal…

An introduction into the overlapping worlds of AppSec and IR

The internet has made our lives easy. On the flip side, one cannot ignore the disadvantages of using it. One of the biggest downsides is…

Me desvelo. La ciudad duerme, pero yo no. Me levanto y voy directo al ordenador, como si fuera un ritual. No hay café que sustituya la…

As cyber threats evolve in speed and sophistication, so too must our defensive strategies. One of the most promising — and controversial —…

Cada septiembre, México se pinta de verde, blanco y rojo. Recordamos a los héroes que se atrevieron a desafiar imperios y a imaginar un…

Bu yazı serisinin amacı, web uygulamalarında sıkça karşılaşılan güvenlik zafiyetlerini hem saldırgan (Red Team) hem de savunmacı (Blue…

Technology is no longer just a support function — it’s the backbone of almost every business. From small startups to growing enterprises…

About Union

Introduction

A while back I dove deep into TryHackMe and learned more than I expected. The platform is delightfully gamified — rooms, flags, and…

“Today we will be looking at OWASP Juice Shop from TryHackMe. This room uses the Juice Shop vulnerable web application to learn how to…

💞 Si quieres contenido REAL de bug bounty, ya puedes ver el vídeo completo aquí: 👉 https://youtu.be/8cc502vxTJ4