This Boring Little Square Wants You to Scan It. If You Do, Your Passwords Are Gone. You scan QR codes without thinking — on menus, parking meters, and parcel slips. Attackers noticed. One scan can …

Introduction

Learn how to defeat logins and other authentication mechanisms to allow you access to unpermitted areas.

Platform: TryHackMe

Jack of All Trades — TryHackMe WriteUp with Flags Date: 02/02/2026 Room Link: https://tryhackme.com/room/jackofalltrades My Profile: https://tryhackme.com/p/RayenHafsawy 🧭 Introduction This room …

Understanding Web Stack Fingerprinting and Framework-Specific Exploitation

Artificial Intelligence (AI) is one of the fastest-growing technologies in the world. It powers applications like ChatGPT, virtual…

Researching the Netgear R7000 Firmware Update Flaw (CVE-2020–13245) In the world of hardware hacking, we often spend hours staring at microscopic traces on a PCB or struggling with UART pinouts …

A breakdown of hashing versus encryption for developers who store customer passwords, with working TypeScript examples using bcrypt…

This article is part of my Web Security Learning Series, where I document concepts and lessons learned while completing the PortSwigger Web…

“” is published by David SEHYEON Baek.

Cybersecurity has become one of the fastest-growing industries, and penetration testers are among the most sought-after professionals. As…

When people think about learning ethical hacking, one of the first assumptions is that you need expensive hardware, paid labs, or costly…

After setting up the academy machine, we run the “ip a” command to determine its IP address

CVE-2026–10112: Low-Severity XSS Flaw Found in Student Management System Dashboard

In the last article on 10th July, I tackled the juice-shop ‘forged feedback’ challenge. Feel free to check it out.

Intro

Bug bounty recon eats hours before you even start hunting.
Pick a target, pull the scope, categorize it, enumerate
subdomains, check…

TL;DR: A standard authenticated user on an enterprise marketplace platform could create a server-side Node.js function, block direct…

Article 3 of 50 in the series: Practical Cybersecurity — From Zero to Defending Your Digital Footprint (Journey of Alex)