Tag feed

#race-condition

61 posts1 followers

Explore Hashnode

Alternatives

Trending tags this week

KMkareem Mohamedkmb.hashnode.dev4h ago · 3 min read

Towel on the Sunbed: A walkthrough of THM Hacker Holidays - Day 8

Here is a quick walkthrough of a room in the TryHackMe Hacker Holidays 2026, a 14-day cybersecurity challenge where a new room unlocks every day, which started on July 27th.Link: https://tryhackme.com

0

KMkareem Mohamedkmb.hashnode.dev15h ago · 9 min read

Weaponizing Time: An Elite Guide to Race Conditions

Most hackers look for flaws in the input, but what about looking for flaws in time?Imagine requesting a single $100 ATM withdrawal, but hitting the button ten times in the exact same millisecond and w

0

YPYogeshwar Peelaexploitnotes.hashnode.dev2d ago · 17 min read

TryHackMe : BreakMe Writeup

Summary BreakMe is a Debian box running Apache with a WordPress install under /wordpress. A vulnerable plugin (WP Data Access 5.3.5) lets a low-privileged WordPress user escalate to Administrator by t

0

YPYogeshwar Peelaexploitnotes.hashnode.dev6d ago · 6 min read

TryHackMe : Towel on the Sunbed Writeup

TL;DR Ponzi Portfolio is a Node.js/Express "staking rewards" web app with a 24-hour cooldown on claiming a reward. The /claim endpoint has a classic check-then-act race condition: it checks whether th

0

ABAshish Babuthestacktrace.hashnode.devJul 25 · 7 min read

Locking a Seat Without Losing the Sale: Atomic Booking in Reverix 2.0

When I rebuilt Reverix — a movie booking platform — from scratch, the seat-locking problem was the first thing that had to be right before anything else mattered. Get it wrong, and two people can "suc

0

Sspipaliya8sudhirpipaliya.hashnode.devJul 21 · 6 min read

The Hidden Danger of MAX()+1 Logic in Enterprise Applications

Generating the next number using MAX() + 1 is one of the most common approaches developers use when creating custom identifiers. At first glance, the logic looks simple and perfectly valid: var maxZid

0

EMEnmanuel Magallanesblog.cardor.devJul 16 · 9 min read

Only One Crosses the Bridge at a Time > Heimdall MCP Adds Resource Locks

The race that nobody warns you about Run two Claude Code sessions against the same repo — one refactoring a module, one fixing a typo three files away that happens to also touch a shared config file —

0

YPYogeshwar Peelaexploitnotes.hashnode.devJun 16 · 9 min read

HackTheBox - Snapped Writeup

Difficulty: Medium OS: Linux Tags: nginx-ui CVE-2026-27944 backup-disclosure bcrypt snapd CVE-2026-3888 race-condition suid privilege-escalation Reconnaissance We begin with a standard nmap scan to

0

AAkshitakshitmahajan.hashnode.devMay 17 · 2 min read

Race Condition in Frontend(react) — Explained with a Food Delivery App

Imagine you open a food delivery app and check: "Restaurants near Amritsar" Request A goes to the server. Before it finishes, you quickly change location to: "Restaurants near Chandigarh" Request B go

0

YPYejun Parkyejunpark3.hashnode.devMay 12 · 10 min read

When Threads Collide: A Deep Dive into Classical Synchronization Problems and Concurrency Bugs

Concurrency is one of those topics that feels deceptively simple until it bites you at 3 AM. You've got multiple threads, they share some data, and suddenly your application freezes, produces garbage

0

#race-condition

Search Hashnode

#race-condition

Explore Hashnode

Trending tags this week

Towel on the Sunbed: A walkthrough of THM Hacker Holidays - Day 8

Weaponizing Time: An Elite Guide to Race Conditions

TryHackMe : BreakMe Writeup

TryHackMe : Towel on the Sunbed Writeup

Locking a Seat Without Losing the Sale: Atomic Booking in Reverix 2.0

The Hidden Danger of MAX()+1 Logic in Enterprise Applications

Only One Crosses the Bridge at a Time > Heimdall MCP Adds Resource Locks

HackTheBox - Snapped Writeup

Race Condition in Frontend(react) — Explained with a Food Delivery App

When Threads Collide: A Deep Dive into Classical Synchronization Problems and Concurrency Bugs