Task 1: Introduction

Room link: https://tryhackme.com/room/hh-thehollowshell-ddb582ac

He booked the quiet room. It’s not on the floor plan, not in the brochure, not on any door. But port 8080 is wide open, and the rooms it…

DAY1

If you read the introduction to this series, you already know that the OWASP Top 10:2025 opens with Broken Access Control, and that this is…

Over the past few weeks, I’ve started a project that has grown into something much bigger than a simple REST API.

Concierge Briefing

WebGPU Gives Websites Access to Your GPU. So Why Can’t a Page Read Your VRAM?

TryHackMe | The Hollow Shell

Author: Nilanjan Chowdhury

Link : TryHackMe | Towel on the Sunbed

Most Kali hardening guides fall into one of two traps. Either they hand you a paranoid checklist of forty things that make the machine…

How a form parameter that never touches <script> tags can still execute arbitrary JavaScript — and why blacklisting < and > isn't enough.

Cyber Insights with Folashade Social Engineering: The Human Side of Cyberattacks Cybersecurity is often associated with hackers, malware, firewalls and sophisticated attacks. But there is another …

Category: AI Security / Social Engineering / Web
Difficulty: Easy
Vulnerability: Prompt Injection (LLM Trust Exploitation)

Exploiting Local File Inclusion and a Zip Slip Vulnerability to Gain Remote Code Execution on the Target Server

The scenario

During our Day 10 of Hacker’s Holidays we’ll exploit a Zip Slip vulnerability in a hotel’s file upload portal, using path traversal to drop…