Hey friends! Nitin here 👋

In Part 1, we built the foundation of our reconnaissance workflow. Starting with a single target domain, we discovered subdomains, expanded…

How a malicious HTTP server can manipulate your terminal using nothing more than an HTTP response

Did you know that 93% of cloud breaches trace back to misconfigurations? Not zero-days, not advanced malware — just honest mistakes. If…

The high-performance Gateway for modern Web and Cloud Application

The new competitive shooter from Valve — Deadlock — continues to gain popularity, and along with it grows the demand for high-quality…

Learn how CyLab’s “Static ain’t always noise” challenge introduces bash scripts and objdump, combining ltdis.sh and grep to extract a flag…

The Human Mind Is the Most Vulnerable Attack Surface After All

LongShao turned out to be a fun machine that chained together three different users before finally reaching root. Instead of relying on a…

The Four-Layer Credential Containment Model, the axios supply chain attack that hit 100 million downloads in under three hours, and the…

The test finds the weakness. The report decides whether anyone fixes it.

Hey everyone 👋 In this write-up, we’ll tackle Do Not Disturb, the Day 07 challenge from TryHackMe’s Hacker Holidays 2026 event. This…

URL to the room: https://tryhackme.com/room/hh-donotdisturb-84a45644

Difficulty: Medium | Type: Cloud Security (AWS Exploitation)

Date: 03/08/2026

Exploring the Eternal Blue exploit and how to take advantage of the MS17–010 SMBv1 Remote Code Execution (RCE) vulnerability.

Chaining Authentication Bypass, Session Hijacking, and Server-Side Template Injection to Gain RCE

N-able says attackers bypassed N-central authentication, reached managed client devices and installed Cloudflare tunnels that survived server access revocation.

Widespread Impact Across Open-Source Core Stacks For decades, the architectural underpinnings of mobile networks relied upon implicit trust. However, as telecommunication operators migrated to clo…