What’s up everyone! Nitin here 👋

A few days ago, I shared a write-up about an IDOR vulnerability I discovered in Google Classroom.

MODULE 06 — JAVA SCRIPT DEOBFUSCATION To access the lab visit the following link: https://academy.hackthebox.com/app/module/41 Obfuscation …

The IDS device alerted us to a possible rogue device in the internal Active Directory network. The Intrusion Detection System also…

Introduction to Digital Forensics Module 4 Memory Forensics Skill Assessment Q1: Examine the file “/home/htb-student/MemoryDumps/Win7–2515534d.vmem” with Volatility. Enter the parent process …

overview: Embark on the “Dimensional Escape Quest” where you wake up in a mysterious forest maze that’s not quite of this world. Navigate…

Module 3 Evidence Acquisition Techniques & Tools Exercise

HTB YARA & Sigma for SOC Analysts Skill Assessment Write-up

A learning guide to HTB’s Linux Fundamentals exercises

The Context:

1. Introduction

Explores SSH Tunneling Techniques

IDS (Intrusion Detection System), Adalah sistem deteksi gangguan yang mengawasi lalu lintas jaringan atau sistem untuk perilaku…

Session hijacking Adalah teknik serangan siber di mana penyerang mengambil alih atau membajak sesi aktif milik pengguna tanpa izin yang…

1. Introduction

18 practical hardening steps — from HTTPS and HSTS to JWT validation, rate limiting, and secret storage — that turn a working API into a…

A real account of why I stopped sharing one OpenRouter API key across everything I build — and the specific settings that fixed it

APIs have become the connective tissue of modern enterprise applications. They connect web and mobile applications, cloud services…

The cybersecurity landscape continues to change as attackers find new ways to hide malicious infrastructure.

When auditing OAuth 2.0 implementations, finding an open Dynamic Client Registration (DCR) endpoint is a promising start. However, proving…