ZZeroProtocolinwebpentestingdeepdive.hashnode.dev·8h ago · 6 min readEncoding in Web ApplicationsWeb applications move data constantly—through URLs, form fields, cookies, headers, and API payloads. The catch: many transport mechanisms (especially URLs and HTML) are text-oriented, while real input11Z
ZZeroProtocolinwebpentestingdeepdive.hashnode.dev·1d ago · 8 min readClient-Side Web Security EssentialsModern web apps aren’t just “pages in a browser”—they’re interactive systems where the client (browser) and the server continuously exchange data and decisions. If you’re learning web application secu10
WWiz-Zeroinw1z-zero.hashnode.dev·1d ago · 4 min readActive Directory: Domain Controller Compromise Through ADCS ESC8 NTLM Relay attack chainObjective ShadowGate recently completed a corporate acquisition that significantly expanded its internal network, user base, and application footprint. Several business-critical systems were migrated 10
ZZeroProtocolinwebpentestingdeepdive.hashnode.dev·2d ago · 7 min readCommon Web Application TechnologiesIntroduction Modern web applications are rarely built with a single technology. A typical application combines a web server, a programming language, a framework, a database, data formats, and backend 10
YPYogeshwar Peelainexploitnotes.hashnode.dev·5d ago · 13 min readTryHackMe : Dreaming WriteupSummary Dreaming is a Linux box built around a Pluck CMS install. Brute-forcing the CMS admin login gives access to the admin panel, which is then abused via a known authenticated file-upload RCE (CVE11N
YPYogeshwar Peelainexploitnotes.hashnode.dev·5d ago · 15 min readTryHackMe : WhyHackMe writeupSummary WhyHackMe is an medium Linux box that chains a handful of low-friction bugs into root. Anonymous FTP leaks a hint pointing at a pass.txt file that's only reachable from localhost. The blog app10
Tturtle01inturtle01.hashnode.dev·Aug 7 · 4 min readInfinity Pool (TryHackMe) — Chaining Small Findings into Complete System CompromiseInfinity Pool (TryHackMe) — Chaining Small Findings into Complete System Compromise Note: This write-up provides a high-level overview of my approach to solving the room. Due to time constraints, I00
Ddamienanon14ininfinitedomain.hashnode.dev·Aug 2 · 4 min read# From the Skip to the Shell: The Room That Wasn't on the Floor PlanI finally started TryHackMe properly this week. This post is the first thing I actually solved there, and it's a small one, but it taught me something I didn't expect from a room rated "very easy." Th00
AMAdbin Magarinthegreylens.hashnode.dev·Jul 27 · 5 min readLearning Azure and DevSecOps Automation: Building a Secure SandboxHi! I'm Adbin Magar, the researcher behind TheGreyLens. If you’ve seen my previous blogs, you know I’ve been working through CTF challenges, VDP program and documenting it. Recently, I have been expan00
Ddamienanon14ininfinitedomain.hashnode.dev·Jul 26 · 4 min readMy First SQL InjectionI've been building up to this one for a while. Out of everything I've worked through in the lab so far, SQL injection is the attack that actually made cybersecurity feel real to me, not because it's f00
