YPYogeshwar Peelainexploitnotes.hashnode.dev·5d ago · 8 min readTryHackMe: Binary Heaven - WriteupSummary A locked-down TryHackMe box gating SSH access behind two credential-checking binaries: a small C program with an anti-debug/obfuscated string comparison, and a statically linked Go binary hidi00
TFThe Flux Readinthefluxread.hashnode.dev·Sep 24 · 1 min readResearchers Used Claude to Hack OpenAI — Here’s How the Chain WorkedThree security researchers recently spent 72 hours using Claude (Opus 4.8 & Opus 5) to weaponize an unpatched forum bug, bypass OpenAI's SSO identity sandbox, and gain unauthorized access to internal 00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Sep 22 · 8 min readTryHackMe: Python Playground WriteupSummary Python Playground is a hard-rated TryHackMe box built around a "sandboxed" Python code execution service fronted by a Node.js/Express web app. The site advertises a blacklist-based filter that00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Sep 22 · 11 min readTryHackMe: Adventure Time WriteupSummary Adventure Time is a hard-rated TryHackMe box themed around the cartoon, with a heavy focus on multi-layered encoding/decoding puzzles, steganography, and lateral movement through several user 00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Sep 9 · 4 min readTryHackMe - CyberHeroes WriteupSummary CyberHeros is an easy-rated web challenge built on the iPortfolio Bootstrap template. The site advertises a "login page" challenge directly in its About section. Inspection of login.html revea00
AKAndriy Kovalenkoindeadpacket.hashnode.dev·Sep 4 · 24 min readThe Ransomware Attack Starts Before Encryption: The Warning Signs Security Teams Cannot Ignore in 2026Most people still picture ransomware as a malicious program that suddenly lands on a computer and starts encrypting files. That image is dangerously incomplete. In a modern enterprise attack, encrypti00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Sep 1 · 6 min readWebVersePro : SnowedOut writeup1. Overview The target is "Pinehollow Plow Tracker," a fictional city snow-plow dashboard running on PHP 8.2.33 behind Cloudflare. The page accepts a zone GET parameter that "centers" the map on a nam00
SSshadow Senseiinshadowsensei-sec.hashnode.dev·Sep 1 · 8 min readPJPT Certified My Journey One Password, Two Characters, and a Power Cut — My PJPT Journey 😅 August 25, 2026. 9:00 AM. I started my Practical Junior Penetration Tester (PJPT) exam. I knew the technical concepts. I had worked t00
JHJames Harmoninhrafns-blog.hashnode.dev·Aug 27 · 25 min readWhy Treating AI as Traditional Software Is a Security Mistake Waiting to HappenArtificial Intelligence (AI) has moved from novelty to infrastructure remarkably quickly. Organizations are integrating large language models into applications, internal tools, customer-facing systems00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 24 · 9 min readTryHackMe : Umbrella WriteupIntroduction Umbrella is a medium-difficulty TryHackMe box built around a leaky Docker registry, an exposed Node.js time-tracking application, and a classic writable-log privilege escalation. The path00
