OS: Linux || Difficulty: Medium

Understanding the Tool Before Using It

Israeli cryptocurrency company Bits of Gold has warned customers of a personal data leak following an incident within a third-party support system. Attackers may have obtained names, national ID n…

An AI agent designed to hunt for vulnerabilities independently discovered a flaw within a public Snowflake repository and used it to gain access to the company’s internal Jira system. The vu…

Part 1 ended with the door identified: CVE-2008-3681, a password-reset bug in Joomla 1.5.0, proven but not yet executed. Part 2 is the…

Server-Side Request Forgery (SSRF) is a vulnerability that allows an attacker to make a server-side application send requests to a…

Web applications have become remarkably powerful.

Cybersecurity is constantly evolving, but the most valuable lessons often come straight from those on the front lines. With this series…

Challenge Overview

Introduction

A vulnerability in Apple’s built-in macOS Screen Sharing service has moved from a serious security concern to an active cyberattack…

Microsoft’s August 10 teardown of DeadLock describes a crew with 80-plus victims, an encryptor that throttles itself below 70 percent CPU…

In today’s security ecosystem, defensive measures are only as effective as your understanding of modern attack vectors. As threat actors…

Kali Linux ≠ Cybersecurity: Why Tools Are Only the Beginning When many people first discover cybersecurity, Kali Linux is often one of the first things they encounter. They see penetration-testing …

Today we will pwn FireFlow from HackTheBox. It’s a medium-difficulty Linux machine by amra13579.

Web application security testing demands absolute precision, high operational speed, and granular visibility into complex application…

Task 1 — The Open Door

target:A lost space mission control system suffers from flawed authentication logic between its Sender and Receiver services.

Introduction

🚨 Your WiFi Router Could Be Hacked — Through a Fake Video Stream