Step 1: (Reconnaissance)

Challenge Overview

The FBI’s Internet Crime Complaint Center recorded more than $16 billion in cybercrime losses in 2024, a 33% increase from the year prior…

1. Target Discovery

Hi! Today we will talk about domains, subdomains and subdomain enumaration. If want to understand what the subdmains are we have to get to…

Introducing defensive security, where you will protect FakeBank from an ongoing attack.

A write-up for Vulnerability Capstone room

Disclaimer: This writeup is based on a Capture The Flag (CTF) challenge hosted on HackTheBox and it is intended for educational purposes…

Intelligent contract solutions replace CLM with AI analysis and benchmarking to speed reviews, cut risk, and improve contract decisions.

The US Treasury targets Sergey Zelenyuk and his firm Operation Zero for the illegal trade of stolen government cyber tools following the sentencing of Peter Williams.

It’s been a while, but we’re back - in time for story time.

Gather round, strap in, and prepare for another depressing journey of “all we wanted to do was reproduce an N-day, and here we are with 0-days”.

Today, friends, we’re looking at SolarWinds Web…

Hi everyone,

Mythic is an open source Command and Control framework built for red team exercises and adversary simulation. It enables operators to…

Threat hunters expose North Korean state actors using Medusa ransomware to fund global espionage. U.S. healthcare and non-profits are the primary targets.

Critical SQL injection flaw (CVE-2026-26198) in ormar Python ORM allows unauthenticated attackers to leak entire databases. Update to version 0.23.0 immediately!

بِسْمِ اللَّهِ، وَالصَّلَاةُ وَالسَّلَامُ عَلَى رَسُولِ اللَّهِ، وَعَلَى آلِهِ وَصَحْبِهِ وَمَنْ وَالَاهُ، اللَّهُمَّ صَلِّ وَسَلِّمْ…

You hear the smart speaker’s voice, you feel the thermostat’s subtle click, you watch the camera’s night vision glow. All of it feels…

Every post, commit, transaction, login, and API call is a strand of digital DNA. If you’re reading this, you have an imprint in that…

This part of TryHackMe is introducing a strong password/hash cracking tool called “John the Ripper.” It seems very easy to use.

Proving Grounds Practice box Graph is rated easy by Offsec and very hard by the community. I would have to agree with the community on this…

This focused on exploiting a Stored XSS vulnerability in Markdown rendering in order to steal the admin bot’s cookie and retrieve the flag