YPYogeshwar Peelainexploitnotes.hashnode.dev·4h ago · 18 min readBrunnerCTF 2026 : The Three Ways WriteupSummary Two connected challenges built around the same Gitea/Drone/rollout-agent environment. The first stage (Flow) gets code execution on the Drone CI runner. The second stage (Feedback / Continuous00
YPYogeshwar Peelainexploitnotes.hashnode.dev·5d ago · 5 min readTryHackMe : Bugged - WriteupOverview Bugged is an easy TryHackMe box built around an MQTT broker (Mosquitto) that allows anonymous connections. The broker exposes normal-looking IoT device telemetry alongside a hidden backdoor t00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 10 · 35 min readTryHackMe : Overflow The Jackpot writeup# Challenge Category Flag 1 B1t Recovery Crypto THM{[REDACTED]} 2 Lost Fortune Included Web THM{REDACTED} 3 Casino Heist Forensics THM{REDACTED} 4 Fresh Powder - Bonus Challenge Detection Eng10
CSChris Sheridaninhalosecurityhasnodedev.hashnode.dev·Aug 6 · 3 min readClaude Code Just Hijacked My Workflow… and My Screen Started Glowing I asked Claude Code to do one of the most boring tasks imaginable. “Find the music file I made.” That’s it. No penetration testing. No coding marathon. No AI agent swarm coordinating across containers02S
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 4 · 7 min readTryHackMe : CryptoCabana WriteupOverview CryptoCabana is a fake crypto-backup service hosted as an Azure Static Website. The attack path chains together four separate misconfigurations: A low-privilege Azure user with only Reader o10
AAAhmed Awad ( NullC0d3 )innullc0d3.hashnode.dev·Jul 28 · 9 min readHunterX: The AI-Powered Offensive Security Platform Redefining Red Teaming, Bug Bounty Hunting, and Penetration TestingTraditional Vulnerability Scanners Are Reaching Their Limits The cybersecurity industry has spent decades improving vulnerability scanners. They became faster. They became capable of sending millions 10
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 24 · 18 min readTryHackMe : Enterprise WriteupSummary Enterprise is an Active Directory box that starts as a classic external AD footprint (DNS, Kerberos, LDAP, SMB, RDP, WinRM) plus two extra web ports: an IIS site on 80 and a Bitbucket-branded 10
CSChris Sheridaninhalosecurityhasnodedev.hashnode.dev·Jul 23 · 9 min readMy AI pentest agent reported 23 root shells. It had actually popped zero. I've been building an autonomous penetration-testing agent — an LLM driving real tools (nmap, masscan, hydra, Metasploit, searchsploit) around a loop: recon a target, pick an exploit, fire it, decide 00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 14 · 13 min readHackTheBox : Sweep WriteupSummary Sweep is an Active Directory box built around a self-hosted Lansweeper instance (an IT asset-management platform). The box is a good example of how Lansweeper's own scanning and deployment fea00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 10 · 35 min readHackTheBox: Phantom WriteupExecutive Summary Phantom is an Active Directory box where the entire path from unauthenticated guest to Domain Admin comes down to credential reuse and secrets sitting in accessible file shares. Ther00