Testing & QA — Tech News

HackTheBox: Odori Writeup

Summary Odori ships as an offline forensics box: the only live services are SSH and Samba, and an anonymously readable backup share just points to a…

cybersecurity ctf hackthebox writeup

Summary A .git repository was exposed on the public-facing website. By examining it, the web application’s architecture could be understood, includi…

ctf htb security

30 сентября мы провели конференцию по информационной безопасности ZeroNights 2026. Спасибо всем, кто решил поучаствовать! Без вас не было бы ни клас…

Note: I originally published this guide on my blog, Cracking Station . This is the syndicated version. Everything here is performed inside the TryHa…

tryhackme cybersecurity ctf tutorial

Summary Adventure Time is a hard-rated TryHackMe box themed around the cartoon, with a heavy focus on multi-layered encoding/decoding puzzles, stega…

cybersecurity ctf writeup tryhackme

Today was a good day and a weird day, in that order. The good part: the autonomous pentest agent I've been building — I call it HALO — went from "ru…

ai security python ctf

Summary The London Bridge is built around a Flask "Explore London" gallery app served behind Gunicorn. A hidden /view_image endpoint takes a form-en…

cybersecurity ctf tryhackme writeup

Executive Summary Lovely Login presents a minimal "Secure Database" login form backed by an Express API at /login . The obvious attack surface — NoS…

cybersecurity writeup web ctf

Executive Summary Super Secure Server presents a login form that appears to check a username and password, but does nothing of the sort. The page's…

cybersecurity ctf writeup web

Summary pscheme.py implements a toy "encryption" scheme that encodes each 4-byte chunk of the flag as extra roots multiplied directly into a public…

cybersecurity writeup ctf python

Hi what’s up, welcome to my page. Today we are going to solve Sauna ctf in Hack The box. This ctf is about Active Directory, which is very important…

ctf redteam cybersecurity

Executive Summary FireFlow is a Linux machine running a fictional "Task Force Nightfall" intelligence platform. The web application exposes a Langfl…

cybersecurity hackthebox writeup ctf

Summary Postman is an easy-rated Linux machine on HackTheBox. The box exposes an unauthenticated Redis instance that allows writing an SSH public ke…

cybersecurity redis ctf hackthebox

Пока одни специалисты спорят в комментариях, способны ли нейросети эффективно искать уязвимости, я решил проверить это на практике. Я Nuit, мне 18 л…

Introduction The HackTheBox "Support" machine is a masterclass in realistic Active Directory exploitation. It demonstrates how a single exposed cred…