Hack The Box — Writeup (Photobomb)

This is a walkthrought for the Photobomb CTF on Hack The Box. It shows how easily we can exploit a Basic HTTP Authentication.

Read more…

🔐 Essential Linux Commands for Ethical Hacking 🔐

Hey everyone! Here’s a quick list of basic Linux commands that every ethical hacker should know. These commands can help you navigate and manage systems effectively.

1. ls - List files and directories in the current directory.
ls -la


2. cd - Change directory to navigate through the filesystem.
cd /path/to/directory


3. pwd - Print the current working directory.
pwd


4. cp - Copy files or directories.
cp source_file destination


5. mv - Move or rename files or directories.
mv old_name new_name


6. rm - Remove files or directories (use with caution!).
rm file_name


7. chmod - Change file permissions.
chmod 755 file_name


8. grep - Search for specific patterns within files.
grep 'search_term' file_name


9. ping - Check connectivity to another host.
ping target_ip


10. netstat - Display network connections, routing tables, and interface statistics.
netstat -tuln

Hello everyone,

This is one of my old videos where I show how to connect to a VPN.
This will work either on Hack The Box or Try Hack Me.

#HTB #THM #Hacking #CTFs

Hack the Box - Writeup (Shoppy)

This box consists of searching for the credentials on the webapp, and then find our way up to escalate our priviledges for root access to the machine.

Read more…

#happy_hacking

Sherlock 🔍

Hunt down social media accounts by username.

This OSINT tool will help you find any username across more than 400 social media platforms.

Website 👾 GitHub

#happy_hacking #osint

🔍 Recon Methodology in Bug Bounty Hunting 🔍

1. Target Identification: Start by defining your target's scope. Use tools like Sublist3r or Amass to discover subdomains.

2. Information Gathering: Utilize WHOIS, DNS records, and Google Dorking to gather intel on the target. Tools like Shodan can reveal exposed services.

3. Asset Mapping: Use Nmap for port scanning to identify open ports and services running on the target.

4. Vulnerability Assessment: Employ tools like Burp Suite or OWASP ZAP to scan for common vulnerabilities (XSS, SQLi, etc.).

5. Documentation: Keep detailed notes of findings for reporting and future reference.

#BugBounty #Recon #Cybersecurity #EthicalHacking

https://t.me/alien_rood

Check this channel out.

A good channel with live recon content for bug bounty hunters.

The content is in Arabic.

🎉 Happy New Year 2026! 🥳

May it sparkle with joy, laughter, and dreams come true! ✨
Wishing you love ❤️, peace ☮️, and endless good vibes 💫
Cheers to new beginnings! 🥂🎇

#HappyNewYear2026 🎊🐉

Release v3.6.2 · projectdiscovery/nuclei

https://github.com/projectdiscovery/nuclei/releases/tag/v3.6.2

MongoBleed: CVE-2025-14847 Memory Corruption in MongoDB. Your Database Talks Back

https://phoenix.security/mongobleed-vulnerability-cve-2025-14847/

https://discord.gg/FJcbRQ7SsD

Our new discord server. Begginers friendly

Predator iOS Malware: Building a Surveillance Framework - Part 1 | Reverse Society

https://blog.reversesociety.co/blog/2025/predator-ios-malware-surveillance-framework-part-1