(“What’s Actually Inside the Register?”)

*A fast, practical walk-through on reverse engineering Dalvik bytecode and exploiting CWE-798 in production mobile apps.*

One thing I think cloud security teams sometimes underestimate is how quickly a “web application issue” can stop being an application…

Objective

Welcome to my walkthrough for the LLMborghini challenge room on TryHackMe! In this room, we examine the security risks associated with…

High-Port Reconnaissance & Flag Discovery

Monitoring Active Directory: Understanding Authentication Events, Baselines, and Audit Policies Active Directory (also known as AD) is the technology used by most companies to administer users …

Hackfinity Battle 2025 — PWN: Breaking a “Fixed” Format String Vulnerability

When I first started learning backend development, security felt like a separate topic.

Why authentication isn’t enough and where authorization actually belongs.

I’m glad I tried that.

ConnectWise released an emergency security patch today to address a critical ConnectWise ScreenConnect vulnerability. The severe flaw allows unauthorized attackers to transfer and execute maliciou…

Bug bounty hunting is not just about finding vulnerabilities. A large part of the process involves reconnaissance, attack-surface…

Hack Smarter World Walkthrough

The Handle That Was Never a Mystery Vanity Fair said LionAW “has never been identified.” The Old Bailey put the alias in a terrorism case in 2020. Treating that gap as a joke is not clever. It is …

DJ-Classifieds is a Joomla extension created by DJ-Extensions. It transforms a Joomla site into an advertising or classifieds platform…

This is how, I got root in Bounty Hacker.

Q1: What is the name of the file stored on a domain controller that contains the password hashes of all domain accounts? (Format: ****.***)

Hidden sub-states, multi-endpoint attacks and single-endpoint password reset races - the deeper side of race conditions.