CVE‑2025‑66516 is a maximum‑severity XXE vulnerability in Apache Tika that lets attackers weaponize PDFs with malicious XFA content to…

Honestly, I was too lazy to make a detailed write‑up this time, so I’m just sharing the script I used.

Learn what the Windows Registry is and how to investigate it

Learn what the Windows Registry is and how to investigate it.

Hey everyone, in this blog, we will see how to identify RCE via LFI using manual and automated approaches. So let’s begin

pgAdmin 4 Meta-Command Filter Bypass , Attackers can craft a malicious PLAIN-format SQL dump that bypasses pgAdmin’s meta-command filter

Authentication and authorization are often combined under the general term "auth." While closely related, they solve different problems…

I wrote an article titled “Broken Access Controls — Protect The Fortress!” as we dove into authentication and authorization, and what…

This is a description the steps I took to solve Infinity Learning lab — Assume & Decrypt (or vice versa)[1]. It is classified as an medium…

Continue your Advent of Cyber journey and learn about container security.

Welcome back, hackers! Today, we’re solving the asm2 challenge from PicoCTF 2019. This one … well, it was not easy, let’s say that first……

In a global program as broad and dynamic as CVE, differences in interpretation are inevitable. One area where these differences…

Before diving into ARP attacks, it’s important to understand how devices on a local network find and communicate with each other. Many…

Burp Suite Intruder is a built-in automation tool used to test the security of web applications. It works by repeatedly modifying request…

Windows systems don’t just “act weird” out of nowhere.

Simple guide to analyse HopHelper.exe using sandbox tools.

Registry forensics walkthrough uncovering persistence and execution artifacts.

Editor is an easy Linux machine on Hack The Box, and in my opinion, it’s a great machine for beginners due to its clear and logical…

Application Programming Interfaces (APIs) are the invisible threads that connect our favorite apps. However, these connections are often…

Let’s be honest for a second: you did not become a bug bounty hunter to watch a progress bar load for three hours. You are here for the…