Thompson (TryHackMe) — Logged into Tomcat using default credentials, uploaded/executed a WAR to get a shell, and escalated by modifying a…

Hey guys and welcome to my journey of preparing for the HackTheBox Certified Penetration Testing Specialist certification! I’m currently…

Summary: I picked an external program, read the guidelines (yes, actually), did recon till my eyes begged for mercy, felt like a “nobe” for…

How I found a swagger.json, used a leaked setup_token, and turned a healthcheck endpoint into a shell to read the flag.

We’re proud to count on Dr. Payne our devoted protector and servant.

Hackers Leverage Raw Disk Reads to Bypass EDR Solutions and Access Highly Sensitive Files A sophisticated new attack technique has emerged that allows cybercriminals to bypass modern Endpoint …

What Is the Torch Search Engine?

And Why You Should Care

I’m beginning this challenge with a lot of excitement, as it will be my first time documenting such a journey. I’ve always enjoyed writing…

About Forest

Do you really know who’s calling?

Following on from my previous article on the largest security issues individuals face today, I’m going to cover the different types of…

Aprende a utilizar Masscan para el escaneo masivo de redes y a combinar su velocidad con la precisión de Nmap para auditorías de seguridad.

Vamos falar das bibliotecas

A Senator calls for the FTC to investigate Microsoft, and NASA bans Chinese nationals from all facilities and Zoom calls

If you need some quick cash, here’s one of the easiest side hustles you can do right now. This method stacks two legit sites together —…

Hello back! I hope you’re doing just fine. Today’s topic is going to be a fun evasion technique (after all, that is in great part what…

What Led Me From Military Service and Entrepreneurship Into Technology I never imagined the same discipline that carried me through two deployments and the patience that helped me build a business …

Here we have another HackTheBox machine that targets Active Directory and Active Directory Certificate Services. What makes this machine…

A Hands-On Exercise Showing How Easy It Is To Hack A Network