YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 18 · 8 min readTryHackMe : Athena WriteupOverview Athena is an easy-rated TryHackMe box that chains a leaked internal path (found via an anonymous SMB share) into a command injection vulnerability in a "router panel" ping tool, followed by a00
JJJozzieTechinjjozzietech.hashnode.dev·Aug 6 · 9 min readAfter a TrueNAS ISO reinstall — the two things that broke that no one warned me aboutThe TrueNAS SCALE machine that runs my SMB shares was in trouble. Windows clients had stopped seeing the shares reliably — intermittent at first, then completely. When I dropped to the shell to check,00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 24 · 18 min readTryHackMe : Enterprise WriteupSummary Enterprise is an Active Directory box that starts as a classic external AD footprint (DNS, Kerberos, LDAP, SMB, RDP, WinRM) plus two extra web ports: an IIS site on 80 and a Bitbucket-branded 10
MAMousa Al Batehinmousa-cloud.hashnode.dev·Jun 19 · 3 min read"We're Too Small to Be Targeted" is Why They Never Saw It ComingA 2025 survey by the UK government, it was found that 41% of micro-businesses and 50% of small businesses have experienced either an attack or a data breach. In another 2025 study by the University of00
RRelayShieldAdmininrelayshield.hashnode.dev·Jun 9 · 4 min readA Phone Call Is All It Takes: How "Pink" Is Draining Microsoft 365 Accounts and Extorting SMBsA new threat group is bypassing your MFA, emptying your OneDrive, and sending ransom demands from your own employees' accounts. It all starts with a phone call. The group, tracked as "Pink" (CL-CRI-1100
JJebitokinsharonjebitok.com·Jun 2 · 28 min readBasic Vulnerability Identification Techniques (TryHackMe)Link to the walkthrough on TryHackMe: Basic Vulnerability Identification Techniques Introduction Vulnerability identification is the process of examining a target environment to identify exploitable w00
RNRuidy Nemausat (PhD)inblog.nemausat.com·May 27 · 12 min readFrom AI Interest to a Working SystemMost small and mid-size businesses are stuck in the same place:Leadership feels pressure to “do something with AI,” some guys is playing with ChatGPT, and nothing useful has been actually shipped… The00
VMValentin Monteiroinmonteiro.hashnode.dev·May 9 · 6 min readMCP Explained: Model Context Protocol for Tech LeadersA tech lead pings you on Slack: "we should move our Claude integrations to MCP." You ask what they have today. Four custom tools wired via function calling, running in production for the past eight months. You ask what's broken. "Nothing, but MCP is ...00
VMValentin Monteiroinmonteiro.hashnode.dev·May 6 · 5 min readClaude Agent SDK: When It's Worth It, When It's NotA tech lead messages you on Slack: "we should move our internal chatbot to the Claude Agent SDK." You ask what they're running today. Single-turn with function calling, plus a retriever. You ask what's broken. "Nothing, but the SDK is better." The SD...00
HHugoinhugovalters.hashnode.dev·Apr 12 · 3 min readStill Running SMBv1? You're Basically Inviting WannaCry to DinnerIt is 2026. The fact that I still walk into enterprise environments and see Server Message Block version 1 (SMBv1) enabled on Domain Controllers because the HR department refuses to replace a multifunction Xerox scanner from 2005 is a complete dereli...00
