Technical Root Cause, Payload Mechanics, and Forensic Analysis of the Metabase Unauthenticated Password-Reset Flaw

Disclaimer: This assessment was performed against an intentionally vulnerable machine inside my own VMware lab for educational and…

Hackers Are Hiding a Windows Backdoor Inside HiveMQ and Element Chat

Mr Robot Can you root this Mr. Robot styled machine? Task 1: Connect to our network To deploy the Mr. Robot virtual machine, you will first need to connect to our network. Go to your access page and …

Another web exploitation category ctf challenge , where i used sql injection to gain access as the admin and get the flag.

No Ransomware. No Malware. Just One Stolen Login — And Patient SSNs Were Gone.

Machine: Connected (Hack The Box, Seasonal Lab) Difficulty: Easy OS: Linux Target: FreePBX / Asterisk PBX

The “CNA Enrichment Recognition List” for September 8, 2026, is now available with 269 CNAs listed. Published monthly on the CVE website…

As security analysts, we often look at static logs and theoretical attack vectors. However, nothing compares to watching threat actors…

This report documents my complete methodology for penetrating the “ Agent Sudo ” machine from TryHackMe . The engagement involved network…

room link: https://tryhackme.com/room/agentsudoctf

> **Flag final:** `THM{Th4ts_th3_wr0ng_g4m3_t0mmy}` (validado en THM)

## Resumen del ataque

Room: Benign Path: SOC Level 1 — SIEM Tools: Splunk, ANY.RUN

Can you root this machine?

durante um bug bounty eu sempre procuro achar rotas que pode ser sujeita a IDOR, essa eu encontrei um site **rastreio de pedidos** que…

durante programa de bug bounty, encontrei um parâmetro numérico refletido em uma query SQL **sem aspas e sem prepared statement**. Um WAF…

While reviewing internet-exposed assets associated with an authorized bug bounty target, I used Shodan to identify publicly reachable…

Step-by-step TryHackMe Injectics walkthrough: Learn to chain SQLi and SSTI to achieve full RCE, bypass controls, and retrieve all flags.

A WordPress plugin with 20,000 installs disabled the framework’s own file-type validation. The interesting question wasn’t how it worked…