Part 2: What Those Open Ports Actually Told Me About My Network

The story of an authenticated command execution vulnerability in one of the most widely deployed AI gateways — from a routine security…

If you’re stepping into web application security or QA testing, two terms you’ll run into constantly are API and API testing, and one tool…

looking at the 5min ctf room, which says “strings isnt enough” made me directly put the binary into a binary disassembler in my case…

OS: Linux || Difficulty: Medium

Understanding the Tool Before Using It

Israeli cryptocurrency company Bits of Gold has warned customers of a personal data leak following an incident within a third-party support system. Attackers may have obtained names, national ID n…

An AI agent designed to hunt for vulnerabilities independently discovered a flaw within a public Snowflake repository and used it to gain access to the company’s internal Jira system. The vu…

Part 1 ended with the door identified: CVE-2008-3681, a password-reset bug in Joomla 1.5.0, proven but not yet executed. Part 2 is the…

Server-Side Request Forgery (SSRF) is a vulnerability that allows an attacker to make a server-side application send requests to a…

Web applications have become remarkably powerful.

Cybersecurity is constantly evolving, but the most valuable lessons often come straight from those on the front lines. With this series…

Challenge Overview

Introduction

A vulnerability in Apple’s built-in macOS Screen Sharing service has moved from a serious security concern to an active cyberattack…

Microsoft’s August 10 teardown of DeadLock describes a crew with 80-plus victims, an encryptor that throttles itself below 70 percent CPU…

In today’s security ecosystem, defensive measures are only as effective as your understanding of modern attack vectors. As threat actors…

Kali Linux ≠ Cybersecurity: Why Tools Are Only the Beginning When many people first discover cybersecurity, Kali Linux is often one of the first things they encounter. They see penetration-testing …

Today we will pwn FireFlow from HackTheBox. It’s a medium-difficulty Linux machine by amra13579.

Web application security testing demands absolute precision, high operational speed, and granular visibility into complex application…

Task 1 — The Open Door