TL;DR CISA confirmed active attacks targeting two distinct Linux kernel flaws. The vulnerabilities involve race conditions in cryptographic sockets and memory corruption in network packet filters.…

I studied JWT attacks properly through the PortSwigger Web Security Academy. Then I moved on to other things, and when I came back to JWTs…

Difficulty: Apprentice

On September 11, 2026, a GitHub-reviewed advisory was published for the PyPI package mysql-mcp-server: its SSE transport validated neither…

I built a tiny local lab to see why hashing a password isn’t enough — and what changes when ‘bcrypt’ enters the picture.

My first experience with DC-1

Description : Someone has compromised this server already! Can you get in and evade their countermeasures?

How to turn a working exploit into a repeatable GitHub Actions test with h5i

Comecei fazendo um portscan com Nmap como sempre:

A few months ago, the phrase “AI-powered cyberattack” sounded like marketing hype designed to sell expensive cybersecurity software. Most…

In this lab, I will demonstrate COM Hijacking by explaining the concept of COM and how adversaries can leverage it to achieve execution and…

I see my client-side defences were no match for you, well done, my apprentice! Let’s see if you have what it takes to claim your prize.

Task 1 — Introduction

What is SQL injection (SQLi)?

El lunes 21 de septiembre de 2026 empiezo. El 21 de septiembre de 2027 termino. Doce horas al día, de lunes a viernes. Más de 3,000 horas…

How a comment buried in a Git repository can instruct your AI to exfiltrate data — and why your existing security tools won’t catch it

Real vulnerability reports, overlooked platform behavior, and practical fixes for code that looks ready to ship.

Hello, welcome to a fool’s guide to a new malware strain called RatHat, this android based malware has been assessed by Zimperium…