Upon visiting https://mercury.picoctf.net:53929/index.html, we are presented with a minimal webpage. It contains a single input field and a…

هک کردن یکی از جذاب‌ترین مباحث روز کامپیوتر بوده و صحبت درباره برترین هکرهای دنیا همیشه داستان‌های هیجان‌انگیزی را به همراه دارد.با معرفی 4 هکر برتر دنیا همراه من باشید. هکر ها از باهوش ترین افراد…

Finding My True Passion

In this walkthrough, we’ll exploit multiple vulnerabilities in the Injectics machine on TryHackMe. The machine involves common real-world…

A hop, a skip, and a cleverly placed trap

Memory Dump  — Ram Dump

The very app that promised to protect women from dangerous men has become the danger itself.

In nature, predators use watering holes as an opportunity to strike. Online, scammers can do the exact same thing, which is why the more…

As a student pursuing Linux system administration and offensive security, I quickly realized the power of Bash scripting. Simple scripts…

How to protect your software pipeline from tampering, threats, and third-party risks in 2025

Hacking Web Applications

Step 1 —we gonna take it down like three bowling balls

Step 1 — respond to me

ArmouryLoader is a highly sophisticated malware using OpenCL GPU decryption and advanced obfuscation to bypass EDRs, gaining privilege escalation by hijacking ASUS Armoury Crate.

Cyfirma reveals Raven Stealer, a new, lightweight MaaS infostealer built in Delphi/C++, using reflective process hollowing and Telegram bots for stealthy data exfiltration from browsers.

Evilent, a new PoC tool, exploits the Windows Event Log service to coerce connections to an attacker-controlled SMB share, potentially leaking NetNTLMvLMv2 credentials from antivirus scans.

Over a dozen critical vulnerabilities (CVSS 9.8) in Honeywell's Niagara Framework expose smart buildings and industrial systems to root-level control via misconfigurations and MitM attacks.

Tracebit uncovered a critical flaw in Google's Gemini CLI (v0.1.14 patch available): it allowed silent code execution and data exfiltration via hidden prompt injections in files like README.md.

Kaspersky reports the ToolShell exploit chain (CVE-2025-49706, -49704, -53770, -53771) actively targets SharePoint servers globally, enabling unauthenticated RCE and auth bypass.