Cybersecurity has become one of the most important technology skills in today’s digital world. From protecting personal accounts to…

This is write-up for recently released “The Crown Jewel” room on TryHackMe. The room puts your Wireshark and Splunk skills to the test to…

This write-up is only focus on practical, theory part do yourself.

Machine: Paperwork

CORS Misconfiguration on xyz.unesco.org through permissive origin reflection allows attacker to perform Cross-Site Web-Socket Hijacking…

Most SOC 2 pentest programs fail on missing retest reports, bad timing, or scope gaps. Here’s what auditors ask and how to build…

Why Public Projects Widen the Attack Surface

How I Ran a 27B AI Model for FREE Without a Local GPU (Zero Refusal) Hello folks! I’m Surya Kiran, a final-year CSE student from Bengaluru. Today, I’ll walk you through how you can run large AI …

What if you could turn subdomain enumeration into a complete reconnaissance pipeline — combining passive sources, DNS brute forcing…

A dangling CNAME, a claimable Mailgun domain, and a rejection that taught me more than an acceptance would have.

I sent “otp”: false in a JSON payload.

Introduction

Want to join the “elite club of CyberHeroes”? Prove it, log in. Bold claim for a login page that, spoiler, does absolutely none of its…

A room about analysing a series of maldocs.

Network Forensics Room — Solution Write-up

When we last left our hero, he was delving into the mind of the cyber professional. The incessant learning, struggling to solidify the…

A story about how a single misread pair of bytes let a public-looking IPv6 address secretly point at 169.254.169.254.

WhoAmI

It started with a joke: