HackTheBox: Odori Writeup
Summary Odori ships as an offline forensics box: the only live services are SSH and Samba, and an anonymously readable backup share just points to a…
Latest News
⚑ Report a ProblemTech news from the best sources
All topics
- игры
AI
News
Tech
agents
ai
api
architecture
automation
backend
beginners
career
devchallenge
devops
javascript
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
react
security
showdev
testing
tutorial
typescript
webdev
Ложка мёда в бочке уязвимостей: разбираем цепочку SSRF → IAM → RCE + бонус
Привет, Хабр! Меня зовут Владимир Аламов, я инженер по информационной безопасности и комьюнити-лидер сообщества Security Champions в Авито .&…
TryHackMe: Adventure Time Writeup
Summary Adventure Time is a hard-rated TryHackMe box themed around the cartoon, with a heavy focus on multi-layered encoding/decoding puzzles, stega…
[Перевод] Telegram попросил нас молчать об XSS. Мы всё равно публикуем
Одно пустое сообщение в Telegram могло привести к утечке переписки — при открытии HTML‑экспорта. Telegram отказался согласовать…
Подмена страницы интернет-банка First Partner Bank на Standoff 365
Привет, Хабр! Будем знакомы — grizzzer, участник различных CTF-команд и независимый исследователь кибербезопасности. В этой статье разберу, как я ре…
BrunnerCTF : WordPressed to Root Writeup
Overview The box ships a mostly-stock WordPress 7.0.0 install on PHP 8.2 / Apache, running on a Debian Trixie base image, packaged as a Docker/Kuber…
BrunnerCTF 2026 - Welcome Aboard (Web)
Summary The Brunnerne Inc. internal wiki sits behind layered infrastructure. Direct access to /wiki/internal/flag (hinted by robots.txt ) returns a…
TryHackMe : The London Bridge writeup
Summary The London Bridge is built around a Flask "Explore London" gallery app served behind Gunicorn. A hidden /view_image endpoint takes a form-en…
TryHackMe : Packed Light Writeup
TL;DR A .pcapng capture shows a victim host on 192.168.1.141 downloading a Python keylogger ( updates.py ) from an attacker-controlled "hotel update…
HackTheBox : Void Whispers Writeup
Summary The "Void Whispers" mail-settings panel passes the user-supplied sendMailPath field directly into shell_exec("which $sendMailPath") with no…
BroncoCTF: Lovely Login
Executive Summary Lovely Login presents a minimal "Secure Database" login form backed by an Express API at /login . The obvious attack surface — NoS…
BroncoCTF : Super Secure Server
Executive Summary Super Secure Server presents a login form that appears to check a username and password, but does nothing of the sort. The page's…
BroncoCTF : Spot the difference Writeup
Challenge We're given two files, file1.txt and file2.txt , each containing what looks like a long, random blob of letters, digits, and symbols — one…
BronoCTF : LEts a GO Writeup
Category: Forensics / Misc Difficulty: Easy Flag: bronco{3ve4yth1ng_1s_aw3s0me} Challenge We're given lego_bricks_challenge.zip , a 63 KB archive. $…
BroncoCTF : Atomic Substitution Theory Writeup
Challenge We're given secret.txt , a single line of comma-separated tuples wrapped in what looks like braces and underscores: (4, 17), (2, 16), (2,…
BronocCTF : Proper Pwning Writeup
Category: Pwn / Binary Exploitation Difficulty: Medium Flag: bronco{1m_th3_b35t_PWN3r_1n_th3_wh0l3_w1d3_w0r1d} Challenge We're given proper.zip cont…
BronoCTF : Custom Cipher Writeup
Summary pscheme.py implements a toy "encryption" scheme that encodes each 4-byte chunk of the flag as extra roots multiplied directly into a public…
HackTheBox: FireFlow Writeup
Executive Summary FireFlow is a Linux machine running a fictional "Task Force Nightfall" intelligence platform. The web application exposes a Langfl…
HackTheBox: JobTwo Writeup
Executive Summary JobTwo is a Windows Server 2022 machine that simulates a realistic corporate phishing and privilege escalation scenario. The attac…
CRTA Exam Writeup — Passed | CyberWarFare Labs
Introduction The CRTA exam by CyberWarFare Labs is a fully hands-on, black-box red team assessment. There are no multiple-choice questions. You eith…
Армагеддон в миниатюре: DC-1 WriteUp
Сегодня у нас на обзоре занимательная машинка от Vulnhub: DC-1 от автора DCAU. По ощущениям предназначена для уровня Beginner/Intermediate, хотя сам…