I did not plan to create a proper write-up for this room, but when I usually finish a room, I like to search for walkthroughs created by…

It begins with a hint :

1- Introduction

HackTheBox: MBCoin writeup | by Dargham Ali

Observed responses for GET /res-api/<ID>/...:

My First Bug: Email Enumeration via Password Reset بسم الله والصلاة والسلام على نبينا محمد Hello everyone! My name is Zouhair and I’m excited to share my first …

On a rainy evening in May 2024, millions of people around the world unknowingly became part of what the FBI would later call the largest…

Summary

If you’re taking OffSec 312 (OSMR) and prefer Parallels Desktop, you might hit a frustrating roadblock: Parallels Tools refuses to install…

In today’s hyper-connected world, cloud-first startups entering the payment ecosystem face a unique blend of opportunity and risk. The…

A Simple Analogy

Investigating a Malicious JAR File Using Java Decompiler, VirusTotal & MITRE ATT&CK.

As a forensic investigator at IResponseDash, you are tasked with examining a ransomware attack that has compromised multiple endpoints…

I never imagined I’d fall victim to a scam. I always thought I was cautious. But one mistake just one moment of trust in the wrong place…

Cybersecurity isn’t just a “big company” problem anymore. Small businesses are increasingly on the radar of attackers — and the costs are…

Explain a penetration technique you’ve used hands-on (even in labs)

Your API is the front door to your system. If attackers get in, they own everything. No excuses. No second chances.

A critical flaw (CVE-2025-41243) in Spring Cloud Gateway with a CVSS 10.0 score allows unauthenticated RCE via SpEL injection. A PoC has been released.

A new malware loader, CountLoader, is linked to Russian ransomware groups. The malware uses phishing lures impersonating the Ukrainian National Police to deliver payloads.

A critical flaw (CVE-2025-55241) in Microsoft Entra ID could have allowed a compromise of every tenant worldwide by bypassing security with "Actor tokens."