An Easy-rated Linux CTF covering Local File Inclusion, PHP command execution, MySQL enumeration, Linux privilege escalation, and a return…

Author: Ratbully Platform: bWAPP (Broken Web Application) Lab/Module: Broken Auth: Forgotten Function Category: Broken Authentication /…

A detailed, practical method to test rate limits properly — and the tricks that actually bypass them

I ran Snyk, Semgrep, Drogonsec and Claude Code on 39 planted bugs. The answer was more interesting than yes or no

On October 21, 2026, two software bugs took over my entire feed. Security researchers are calling the pair PHP2Shell, and they carry a…

Two bugs in the language behind most of the web, explained in plain language and in a comic strip.

Welcome to this new Medium post, today we are going to explore a shellcode execution technique that abuses SetupIterateCabinet(a Cabinet…

CTF Name : Pickle Rick Plateform : TryHackMe Author : ZODiAK

Crack the Hash: A Beginner’s Guide to Hashing and Password Cracking

From a hidden stego passphrase to root, via SQL injection and an abandoned screen session.

Esse artigo é um write-up do desafio pwn108 da TryHackMe. Esse desafio faz parte da sala PWN101 de exploração de binários. O link da sala é…

It fits in your pocket, runs on a battery, and can audit a network without..

1. Who are SmatchoiceHackers? | The Global Elite Hacking Collective SmatchoiceHackers is a prominent, versatile network of professional…

CVE-2026–111497, Node.js’in bundle ettiği Brotli decoder’daki bir out-of-bounds write zafiyetidir. Node.js project bunu “remote code…

Ngl, sebelumnya aku mikir begini. Android kan udah punya banyak proteksi bawaan, jadi aplikasi apapun yang jalan di atasnya pasti ikut…

Task 3

PHP’de bulunan ve PHP2Shell adı verilen iki kritik güvenlik açığı, WordPress, Drupal, Joomla ve MediaWiki gibi PHP tabanlı sistemleri…

On October 21, Quest Diagnostics discovered unauthorized access to its Quanum Lab Services Manager (LSM) system. In a filing with the SEC, the lab giant said it believes “an unauthorized par…

TL;DR Oracle has issued an out-of-band Oracle Java security alert for CVE-2026-91403, rated CVSS 9.1. The update distrusts intermediate CA certificates tied to the eMudhra compromise in Java SE an…

TL;DR On October 22, 2026, Okta disclosed four Okta Access Gateway vulnerabilities in three advisories. They include the PHP2Shell flaws in its PHP runtime and a CVSS 9.1 command execution bug in …

TL;DR Trend Micro’s Zero Day Initiative (ZDI) posted details of several unpatched Linux kernel vulnerabilities to the public kernel mailing list on October 22, 2026. Two KSMBD flaws carry a …