How a Hardcoded Superadmin Key Led to a Biometric 2FA Bypass — and a Painful Duplicate

This is Day 3 of my AWS learning journey. Today I learned about Elastic IPs and storage options in EC2, especially Elastic Block Storage…

Bu labda ilk bakışta oldukça basit görünen bir kontrol var:
 “Sadece ginandjuice.shop domain’ine sahip email adresleriyle kayıt…

I’ll reproduce this scenario from an offensive security perspective.

Right now, we are in 2026. If we look back from 2010 to 2025, ‘‘ we can see that in these 15 years, online scams and frauds have increased…

Create your own LM tool using impacket!

A deep dive into DPRK hackers using fake job interviews and blockchain-based C2 to deploy malware

This article is for educational purposes only and should not be misused in a production network. As a cybersecurity enthusiast, I am here…

I wanted to move beyond surface‑level tutorials and build something that actually reflects how Windows infrastructure exists in real…

Hello, stranger — let’s begin.

Hey, here you will see the write-up for Hospital machine made by “MrHex” on Tryhackme. You can access the machine from this link…

Nmap

Forced browsing is one of the most overlooked web application vulnerabilities. Despite being simple in nature, it can lead to severe…

Hi Everyone!! I am documenting my learning here with you inorder to track and revise it later.

So, i was doing a pentest and i came across a subdomain with Apache superset installed, i had admin access to it, after exploring a bit i…

During a short, controlled security assessment of an educational institution’s network, I encountered a scenario that perfectly…

Ever marked a pet as inactive, thinking it’s “retired for good”… only to find you can still rename it… and even bring it back to life? 😳

Your New Hunting Partners Are not Human

Learn to solve the Dig Dug room on TryHackMe. Master DNS enumeration using ‘dig’ to find hidden flags in this quick, step-by-step write-up.

A step-by-step walkthrough of the Hackviser “Data Heist” scenario, analyzing data theft techniques and real-world exploitation paths.

The “Attacktive Directory” CTF room on TryHackMe is designed to teach users how to exploit common vulnerabilities in a Windows Active…