Mmhk cyber6d ago · 10 min readLearning Nmap in My Home Lab: Open Ports, SSH, and a Few Wrong AssumptionsMy second post took a little longer than expected because, well, I was down with a viral infection. But anyway, I'm back. This time, I decided to learn Nmap. I watched NetworkChuck's Nmap video on You2Mmhk-cyber.hashnode.dev
YYogeshwar PeelaSep 10 · 10 min readTryHackMe - Olympus WriteupSummary Olympus is a Linux box built around an old Victor CMS 1.0 install hidden under /~webmaster/. An unauthenticated SQL injection in the CMS search feature was the root of the entire chain: it dumexploitnotes.hashnode.dev
YYogeshwar PeelaSep 9 · 4 min readTryHackMe - CyberHeroes WriteupSummary CyberHeros is an easy-rated web challenge built on the iPortfolio Bootstrap template. The site advertises a "login page" challenge directly in its About section. Inspection of login.html reveaexploitnotes.hashnode.dev
YYogeshwar PeelaAug 11 · 18 min readTryHackMe : The London Bridge writeupSummary The London Bridge is built around a Flask "Explore London" gallery app served behind Gunicorn. A hidden /view_image endpoint takes a form-encoded URL and fetches it server-side - classic SSRF 11Nexploitnotes.hashnode.dev
YYogeshwar PeelaJul 24 · 18 min readTryHackMe : Enterprise WriteupSummary Enterprise is an Active Directory box that starts as a classic external AD footprint (DNS, Kerberos, LDAP, SMB, RDP, WinRM) plus two extra web ports: an IIS site on 80 and a Bitbucket-branded 1exploitnotes.hashnode.dev
KK4M1_n0_73Jul 19 · 8 min readScoping out a Linux server / Kioptrix 1 Recon and Enumeration.So this is the initial phase of the Kioptrix hack. Kioptrix Level 1 is an intentionally vulnerable VM I downloaded from VulnHub and ran in VMware. The goal of this machine is simply to get root. I'm l0xk4m1.hashnode.dev
SSunnyJul 7 · 6 min readTryHackMe Nmap Live Host Discovery: Beginner-Friendly Step-by-Step Learning GuideIntroduction I recently completed the Nmap Live Host Discovery room on TryHackMe as part of my ongoing cybersecurity learning journey. Before scanning ports or searching for vulnerabilities, security 1cybersecurity-learning.hashnode.dev
AAeon Flex / Splicer ScornJun 12 · 11 min readThe 2026 Wireless Threat Nobody Prepared For: UWB Hacking, Relay Attacks, and Proximity CrimesLook. I’ve been breaking things since before it was normal for kids to have phones. I watched the entire security industry grow up from a hobby into a bloated bureaucracy of certifications, compliancechaincoder.hashnode.dev
JJebitokJun 6 · 19 min readGuided Pentest: WebLink to the Walkthrough/Challenge on TryHackMe: Guided Pentest: Web Introduction Imagine you have been hired as a penetration tester. Your client runs a small web application called RecruitX, an intersharonjebitok.com
JJebitokJun 4 · 19 min readGuided Pentest: Infrastructure (TryHackMe)Link to the Walkthrough on TryHackMe: Guided Pentest: Infrastructure Introduction Penetration testing isn't a single skill. It's a way of thinking. On any given engagement, you might need to think liksharonjebitok.com
