Ложка мёда в бочке уязвимостей: разбираем цепочку SSRF → IAM → RCE + бонус
Привет, Хабр! Меня зовут Владимир Аламов, я инженер по информационной безопасности и комьюнити-лидер сообщества Security Champions в Авито .&…
DevOps
⚑ Report a ProblemLatest DevOps news from Tech News
TryHackMe: Adventure Time Writeup
Summary Adventure Time is a hard-rated TryHackMe box themed around the cartoon, with a heavy focus on multi-layered encoding/decoding puzzles, stega…
BrunnerCTF : WordPressed to Root Writeup
Overview The box ships a mostly-stock WordPress 7.0.0 install on PHP 8.2 / Apache, running on a Debian Trixie base image, packaged as a Docker/Kuber…
BrunnerCTF 2026 - Welcome Aboard (Web)
Summary The Brunnerne Inc. internal wiki sits behind layered infrastructure. Direct access to /wiki/internal/flag (hinted by robots.txt ) returns a…
TryHackMe : The London Bridge writeup
Summary The London Bridge is built around a Flask "Explore London" gallery app served behind Gunicorn. A hidden /view_image endpoint takes a form-en…
TryHackMe : Packed Light Writeup
TL;DR A .pcapng capture shows a victim host on 192.168.1.141 downloading a Python keylogger ( updates.py ) from an attacker-controlled "hotel update…
BroncoCTF: Lovely Login
Executive Summary Lovely Login presents a minimal "Secure Database" login form backed by an Express API at /login . The obvious attack surface — NoS…
BroncoCTF : Spot the difference Writeup
Challenge We're given two files, file1.txt and file2.txt , each containing what looks like a long, random blob of letters, digits, and symbols — one…
BronoCTF : LEts a GO Writeup
Category: Forensics / Misc Difficulty: Easy Flag: bronco{3ve4yth1ng_1s_aw3s0me} Challenge We're given lego_bricks_challenge.zip , a 63 KB archive. $…
BronocCTF : Proper Pwning Writeup
Category: Pwn / Binary Exploitation Difficulty: Medium Flag: bronco{1m_th3_b35t_PWN3r_1n_th3_wh0l3_w1d3_w0r1d} Challenge We're given proper.zip cont…
HackTheBox: FireFlow Writeup
Executive Summary FireFlow is a Linux machine running a fictional "Task Force Nightfall" intelligence platform. The web application exposes a Langfl…
CRTA Exam Writeup — Passed | CyberWarFare Labs
Introduction The CRTA exam by CyberWarFare Labs is a fully hands-on, black-box red team assessment. There are no multiple-choice questions. You eith…