https://kalkikrivadna.com/halloffame.html

Resources: https://app.hackthebox.com/sherlocks/AoTR%25201%253A%2520A%2520Call%2520from%2520the%2520Museum?tab=play_sherlock

Hello guys, welcome back! I hope you’re doing well.

A beginner’s honest take on Claude Code Security and the hype nobody is questioning

Security is no longer optional in modern web development. As applications grow more complex and data-driven, protecting user information…

By: Andry Muh Ivan De Reva

New Attack Vectors Incoming

Ethical hacking without networking knowledge is like driving blindfolded. Every attack, every defense, every packet — it all depends on how…

INTRODUCTORY TO NETWORKING

Welcome to my first CTF Writeup.

This is my write-up for the TryHackMe room on Subdomain Enumeration ↗ . Written in 2026, I hope this write-up helps others learn and…

Kasus ini menceritakan tentang suatu malam di pertengahan bulan November, ketika seorang karyawan CALE yang sedang kelelahan mendapatkan…

I Didn’t Touch The Server… But I Still Executed JavaScript (DOM XSS Explained)

Introduction – HTTP Headers Are Not “Just Metadata”

Introduction

The February Intigriti challenge was a whole vibe. We went from a simple Markdown input to full-on administrative cookie exfiltration. In…

Anthropic claims DeepSeek and other Chinese AI firms used 24,000 accounts to "pilfer" Claude's data. Inside the high-stakes battle for LLM training secrets.

This scenario simultaneously tests identity confirmation tooling (SSPR, MFA, Conditional Access), how users act under pressure, and the organization's ability to detect and follow-up on social engineering attacks.

Challenge: Multi-Stage Attack Chain Leading to Flag Disclosure

Ever heard of a $30 gadget opening up a corporate network in less than five minutes? Or how a simple USB stick can bypass a locked Windows…