Description

Introduction

I had to learn a hard lesson with Medium last Thursday. Per the new TOS for Hack the Box writeups, it is no longer acceptable to post them…

I didn’t start out thinking I’d end up in security research.

Difficulty: 🟢 Apprentice

Tester: Liam Smydo | liamsmydo.com | github.com/01xmm

Step 1: Reconnaissance

OS Command Injection is a critical vulnerability that allows an attacker to execute arbitrary operating system commands on the server…

Five days ago I pushed the first version of Pulse. I used Claude Code to help write it, but every detection rule, every design decision…

In this blog, we are going to break down an IP address in a simple way, which is one of the most important concepts in computer networking.

A practical walkthrough of SQL injection techniques, from basic data extraction to advanced blind exploitation.

Be your own doctor, researcher, author, coach, therapist, teacher and most importantly, your own filter in a world full of noise.

**Intro:** In my journey through system administration and security, I’ve realized that the difference between a reactive team and a…

In this walkthrough, we will be compromising Arasaka, an easy-difficulty Active Directory challenge lab from Hack Smarter. The engagement…

Apollo Agent

Welcome to Day 19 of our 30-Day Cybersecurity Mastery series.

I recently worked on the “Web Gauntlet” challenge from picoCTF, and this one was actually pretty fun. It’s basically a SQL injection…

According to their page a few points to note:

The security industry spent thirty years teaching developers not to trust user input. Sound advice. Then handed them systems that trust…