Retrocompatibility is a vulnerability

If you ask any experienced bug hunter where to find the biggest payouts, they’ll tell you the same thing: look for features that handle…

Assertion101 writeup — Proving ground — complete writeup. Difficulty: Intermediate nmap scan: 2 open ports

Welcome to this new Medium post. In this one we will see how to walk the Windows VAD tree from a kernel R/W primitive, and how to abuse…

AI is the biggest field.

What We’ll Cover in This Blog

Solving the Hack Smarter Challenge Lab: Samurai(Writeup) — My Approach Objective As part of a penetration test, your team identified an interesting web server. Your task is to enumerate the target …

Six months ago, a finance employee in Hong Kong joined a video call with what looked like his company’s CFO and several other executives…

Introduction

Hello everyNYAN! Pix here, back again, still glowing, still moving too fast to stand still.

Hello to everyone, Pix here.

Before we attack the vault, we find the vault. The way in is usually a normal user — one who never knew they were a door.

MySQL Enumeration & Database Access

Target: DVWA @ 192.168.56.103 Tester: Rat-Bully Security Levels Covered: Medium✅

If there’s one lesson every bug hunter learns the hard way, it’s this: The most dangerous features are often the ones built purely for user…

Before going, I expected DEF CON to be more centered around AI than my previous experience. AI has taken the world by storm, and it keeps…

Welcome to this new Medium post. In this one we will see Process Parameter Poisoning, a process injection technique published by SensePost…

CVE-2026–39987 is a critical pre-authentication Remote Code Execution (RCE) vulnerability affecting Marimo, an open-source reactive Python…

No budget. No problem. Some of the best security professionals learned everything on free resources.

Hello everyone,