kamaji·2d agoRubber Stamp (TryHackMe) — De IIS a Domain Admin: ViewState Deserialization + AD CS ESC1Cómo un archivo de respaldo olvidado encadena hasta el control total del dominio. Walkthrough sin spoilers: las banderas aparecen…
Baozilla, Let's go!·Nov 4The Misconfigured Cage: Irregular Says the Sandbox Escapes Were Its Own ErrorNovember 4, 2026 — Day 286 of our AI crisis timeline.
InCyber ChroniclesbySamadhan shimple·Oct 13CSRF Misconfigurations: Analyzing a Logout Vulnerability and Its Impact | by Samadhan ShimpleDuring a web security assessment, I examined how an application handled user sessions and authentication-related actions. While testing the…
P.A·Sep 14How Simple Cloud Misconfigurations Lead to Total CompromiseWhat an intentionally vulnerable AWS environment teaches us about where our security boundaries actually end
Gaonkarpranay·Aug 25Attacking GraphQLThe Attacking GraphQL module on Hack The Box Academy teaches you how to test, enumerate, and exploit security flaws in GraphQL APIs instead…