Introduction.

TLDR: Foothold — Simple PHP Photo Gallery RFI exploit + mysql enumeration + SSH password spraying; Privesc — Writable /etc/passwd file

TLDR: Foothold — Custom website + backend enum + PHP file upload; Privesc — Ususual file under /opt + GTFOBins

TLDR: Foothold — Web terminal (very trivial); Privesc — Python rpcpy exploit (unusual file under /opt)

Welcome Everyone!

I recently came across a “Tech News World” blog titled ”Beyond ChatGPT: Shadow AI Risks Lurk in SaaS Tools”.The word shadow AI ruminated in…

Today, I want to share a few ideas I’ll be launching next week, and I’d love your feedback before I roll them out.

This will be the first article in my brand new newsletter, which will directly support my leadership coaching journey. It will start in…

When I was preparing for the CompTIA Security+ certification, I ran into a problem that many learners face:

The enterprise adoption of agentic AI systems is not just an IT upgrade; it is a paradigm shift in security architecture, governance, and…

Introduction

In today’s cybersecurity landscape, threats are constantly evolving, and it’s more important than ever for us to be able to quickly…

If cybercrime were a country, it would have the world’s third-largest economy, trailing only the United States and China.

task2 — Red Team Recon

Exploring protocols, servers, and how to defend against sniffing, MITM, and password attacks.

A look into enriching IP and domain insights with open source threat intelligence

Hands-on walkthrough breaking down protocols, servers, and their role in defensive security.

Introduction

Welcome to another Hack the Box exercise. In this blog post, I will show you how I owned the Planning machine on Hack the Box. Hack The Box…