My Journey to BSCPGetting into web security was never something I had a perfectly planned roadmap for. I started with curiosity. I wanted to understand how websites work, how they can be attacked, and more importantly,Sep 11 · 13 min readdangkhoi.hashnode.dev
WannaGame Championship 2025-WriteupHide and Seek – Forensic Investigation Report The victim reported that after browsing and downloading some files, suspicious processes began appearing on the system. Our objective is to reconstruct thFeb 27 · 3 min readdangkhoi.hashnode.dev
Chaining LFI to RCE – HackTheBoxProblem This lab is from HackTheBox. The objective is to achieve Remote Code Execution (RCE) and retrieve the flag located in the root directory. The web application is quite simple. It contains threeFeb 23 · 8 min readdangkhoi.hashnode.dev
A problem in DreamHackUnderstanding IP Trust and the Dangers of X-Forwarded-For While practicing some web challenges on DreamHack, I came across a beginner-level challenge called whoami – Level 1.Although the difficulty isJan 6 · 3 min readdangkhoi.hashnode.dev
How I Failed My First Cybersecurity CertificationI used to think the ISC2 CC was just a “lightweight” theory-based certification. Three days of revision should have been enough. While struggling with some CTF challenges, I started to feel a bit burned out. I scrolled through LinkedIn and saw peopl...Dec 24, 2025 · 5 min readdangkhoi.hashnode.dev
