Beyond the AttackBox: Broken AssumptionsDNS Enumeration Outside the AttackBox This room was GoBuster: The Basics, specifically the DNS enumeration task for offensivetools.thm. On paper, it’s simple: enumerate subdomains using GoBuster and a wordlist. In practice, running it outside the Try...Jan 3 · 3 min readabuka-analyzes.hashnode.dev
The Day My Own Security Setup Broke TryHackMeThe Bug That Was Staring Me in the Face The past few weeks were unusually light. New Year, Christmas, family, reduced grind. I wasn’t entirely consistent, and honestly, that break was necessary. In cybersecurity, trying to force progress every single...Jan 3 · 3 min readabuka-analyzes.hashnode.dev
I Finally Stopped Relying on TryHackMe's AttackBoxThe Problem That Forced My Hand It had been a while since I posted anything about my server security journey. Not because I stopped learning, but because I hadn’t hit a moment that forced growth. That changed recently. TryHackMe updated how its serve...Dec 24, 2025 · 7 min readabuka-analyzes.hashnode.dev
SQL Fundamentals: Relearning SQL the Hard Way (And Why I Needed It)I’ve always known what SQL Injection was, at least in theory.It’s one of those things you hear so much that it stops sounding mysterious. But this TryHackMe room forced me to face something uncomfortable: I understood SQL, but I had never really work...Dec 4, 2025 · 3 min readabuka-analyzes.hashnode.dev
Seeing an Old Language With New EyesComing from front-end development, JavaScript has always been familiar to me. I knew how to manipulate the DOM, structure events, work with APIs, build interfaces, and add interactivity. But learning JavaScript from a security perspective is an entir...1ONov 26, 2025 · 3 min readabuka-analyzes.hashnode.dev