This room shifts focus from Splunk over to the Elastic Stack, specifically Logstash, the data processing engine that sits between raw logs…

A hardcoded SAS token in the website’s JavaScript led to a service account. That service account unlocked an Azure Key Vault. The vault’s…

c4ptur3th3fl4g — TryHackMe WriteUp with Flags Date: 05/09/2025 Room Link: https://tryhackme.com/room/c4ptur3th3fl4g My Profile: https://tryhackme.com/p/RayenHafsawy 🧭 Introduction This room is a …

Exploiting an Over-Permissioned Azure SAS Token to Recover the Hidden Flag

Fixit, A TryHackMe Walkthrough

Brazil's SISVISA health surveillance system left 102,215 files totaling 79GB open online, including tax IDs and identity documents, without password protection.

What’s up everyone! Nitin here 👋

Forget zero-days. Forget writing 500-line Python scripts. Here’s the blunt reality of web security after 7 years in incident response.

LinkedIn:- https://www.linkedin.com/in/vansh-rathore-cybersecurity/

The Net Sec Challenge room on TryHackMe is an exciting challenge that tested my skills in utilising core cybersecurity tools like Nmap (for…

Hello everyone!

As cyber threats become more advanced, businesses need a reliable way to identify weaknesses before attackers discover them. Penetration…

Introduction

Lab Setup

TASK 1 Introduction

Target: 10.129.52.21 (JEEVES) Domeniu: — (mașină standalone, workgroup WORKGROUP) Dificultate: Medium (Windows)

“The most dangerous vulnerabilities aren’t always SQL Injection or Remote Code Execution. Sometimes, the application works exactly as the…