HTB - UpDown Writeup - no Metasploit
Summary A .git repository was exposed on the public-facing website. By examining it, the web application’s architecture could be understood, includi…
DevOps
⚑ Сообщить о проблемеПоследние новости DevOps от Tech News
Все темы
agents
ai
api
architecture
automation
aws
backend
beginners
cloud
database
devchallenge
devops
docker
javascript
kubernetes
llm
machinelearning
mcp
node
opensource
performance
productivity
programming
python
security
showdev
testing
tutorial
typescript
webdev
Ложка мёда в бочке уязвимостей: разбираем цепочку SSRF → IAM → RCE + бонус
Привет, Хабр! Меня зовут Владимир Аламов, я инженер по информационной безопасности и комьюнити-лидер сообщества Security Champions в Авито .&…
Bank — сложная машина от aclabs.pro со взломом пин-кода, пивотингом и побегом из контейнера
Сложный таск с 6 флагами и 2 машинами. В первой зоне видимости у нас Windows машина с вебом, через который получаем доступ по winrm с первым флагом.…
TryHackMe: Adventure Time Writeup
Summary Adventure Time is a hard-rated TryHackMe box themed around the cartoon, with a heavy focus on multi-layered encoding/decoding puzzles, stega…
BrunnerCTF : WordPressed to Root Writeup
Overview The box ships a mostly-stock WordPress 7.0.0 install on PHP 8.2 / Apache, running on a Debian Trixie base image, packaged as a Docker/Kuber…
BrunnerCTF 2026 - Welcome Aboard (Web)
Summary The Brunnerne Inc. internal wiki sits behind layered infrastructure. Direct access to /wiki/internal/flag (hinted by robots.txt ) returns a…
My AI Agent Captured the Flag. Then the Platform Refused to Accept It.
Today was a good day and a weird day, in that order. The good part: the autonomous pentest agent I've been building — I call it HALO — went from "ru…
TryHackMe : The London Bridge writeup
Summary The London Bridge is built around a Flask "Explore London" gallery app served behind Gunicorn. A hidden /view_image endpoint takes a form-en…
TryHackMe : Packed Light Writeup
TL;DR A .pcapng capture shows a victim host on 192.168.1.141 downloading a Python keylogger ( updates.py ) from an attacker-controlled "hotel update…
BroncoCTF: Lovely Login
Executive Summary Lovely Login presents a minimal "Secure Database" login form backed by an Express API at /login . The obvious attack surface — NoS…
BroncoCTF : Spot the difference Writeup
Challenge We're given two files, file1.txt and file2.txt , each containing what looks like a long, random blob of letters, digits, and symbols — one…
BronoCTF : LEts a GO Writeup
Category: Forensics / Misc Difficulty: Easy Flag: bronco{3ve4yth1ng_1s_aw3s0me} Challenge We're given lego_bricks_challenge.zip , a 63 KB archive. $…
BronocCTF : Proper Pwning Writeup
Category: Pwn / Binary Exploitation Difficulty: Medium Flag: bronco{1m_th3_b35t_PWN3r_1n_th3_wh0l3_w1d3_w0r1d} Challenge We're given proper.zip cont…
DevSecOps на практике: райтапы заданий с митапа CyberCamp глазами тех, кто их придумал
В марте состоялся второй эпизод DevSecOps-митапа CyberCamp, в программу которого вошли киберучения на платформе Jet CyberCamp. Три задания, максимал…
Sauna CTF HTB
Hi what’s up, welcome to my page. Today we are going to solve Sauna ctf in Hack The box. This ctf is about Active Directory, which is very important…
HackTheBox: FireFlow Writeup
Executive Summary FireFlow is a Linux machine running a fictional "Task Force Nightfall" intelligence platform. The web application exposes a Langfl…
From Credentials to Domain Admin: Support Machine Writeup
Introduction The HackTheBox "Support" machine is a masterclass in realistic Active Directory exploitation. It demonstrates how a single exposed cred…