Hi everyone : )

Overview

1- What is Networking?

“Can you bypass the login form?”

Try to learn from the writeup first, and only use it if you get stuck.

I thought cybersecurity was all about hacking. Learning OSINT made me realize it’s often about observing what people have already made…

I still remember the first time I heard the word “bug bounty.”

Akwaaba! gang, another part of my Static Android App Hacking series, today our focus is on exploiting Deep Links to achieve RCE. An easy…

On 29 June 2026, CISA added CVE-2026-48558 to its Known Exploited Vulnerabilities catalog. The flaw is a critical SimpleHelp authentication bypass in the OIDC login flow. Attackers now use it in t…

TL;DR Developers patched six high-severity wolfSSL security vulnerabilities in the embedded SSL library. These flaws include an X.509 trust-chain bypass and dangerous heap buffer overflows. Admini…

TL;DR Four critical security flaws currently impact all versions of the EVoke Systems Charging Station Management System. These EVoke Systems vulnerabilities allow attackers to hijack active sessi…

TL;DR Cacti fixed four critical flaws in version 1.2.31. Three allow pre-authentication SQL injection, and one allows unauthenticated local file inclusion. All four score between 9.3 and 9.8. Why …

When I first built the labs for Hackmetoo, the goal was simple: get working content in front of learners fast. PHP files, inline CSS, some…

I remember the first time I opened Burp Suite and thought it was enough on its own.

Where the news is always bad, but the analysis is always good.

A new ransomware strain leaves no instructions to pay, and AI just compressed the attack window from days to hours. Here is the one free…

2 domains: sevenkingdoms.local north.sevenkingdoms.local so kingslanding.sevenkingdoms.local(192.168.56.10) must be a DC in the first domain the north.sevenkingdoms.local has two subdomains one of …

Foothold

Introduction