Turning messy, unreadable log files into actionable threat intelligence using Python.

Learning to automate security tasks that matter

Introduction

Welcome back to another writeup! Today, we’re checking into The Byte Lotus Hotel for Day 2 of TryHackMe’s Hacker Holidays event.

1.Create a Python virtual environment

A walkthrough of an authorization gap in NotebookLM’s Gemini import flow, and an argument for why locking out an owner is a different class…

Introduction

You can play this room for free: “https://tryhackme.com/room/hh-packedlight-02e5330c”

When building web applications on Linux or Unix servers, security often takes a back seat to functionality. That’s where SQL Injection…

1.Login via Credential

A beach bar jukebox app had a YAML import feature with zero sanitization. We went from login page to root shell in under 15 minutes.

TL;DR The Django team shipped security releases 6.0.8 and 5.2.17 on August 4, 2026. They fix four flaws, led by a high-severity Django vulnerability, CVE-2026-15307. In some setups, it can enable …

Overview

Web application security often heavily relies on how different infrastructure layers communicate. Recently, I discovered and reported a…