All Posts
Modern Pentesting Methodology: How Real Penetration Tests Actually Flow
Learn how real penetration tests flow from recon and scanning to exploitation, privilege escalation, pivoting, and reporting. Full guide for members
CVE-2026-48095: The 7-Zip NTFS Heap Overflow That Can Ruin Your Day – And Your Network
Analyze CVE-2026-48095, the critical 7-Zip heap buffer overflow. Learn how the GetCuSize vtable hijack works, its extension bypass risk, & how to patch
Web Application Attack – the Practical Hacking Cheatsheet Series
A practical Web Application Attack Cheatsheet covering recon, directory brute-forcing, SQL injection, XSS and more, specifically Designed for HTB
Active Directory – the Practical Hacking Cheatsheet Series
Get a practical Active Directory attack cheatsheet covering AD enumeration, BloodHound, LDAP, SMB and More, Specifically Designed for HTB
The TrapDoor Supply Chain Attack: Coordinated Multi-Registry Campaign Hits npm, PyPI, and Crates.io
Inside the TrapDoor supply chain attack. Discover how 34+ packages across npm, PyPI, and Crates.io use AI prompt injection to steal dev secrets
NGINX ‘nginx-poolslip’ Zero-Day RCE: Millions of Servers Still Exposed After Rift Patch
The new NGINX 'nginx-poolslip' zero-day RCE bypasses the Rift patch in NGINX 1.31.0. Read our highly technical analysis and step-by-step mitigations
Beginner’s Guide to Conquering Reactor on Hack the Box
Conquer Reactor on Hack The Box like a pro with the official HTB Writeup. Dominate this challenge and level up your cybersecurity skills
Self-Hosted Email That Actually Works: The Ultimate Guide to Digital Sovereignty
Stop relying on Big Tech. This massive guide teaches you how to build a self-hosted email server that actually works. Master Mailcow, and more
The Beginner’s Mindset for Solving Hack The Box Machines
Learn the beginner mindset and step-by-step approach for solving Hack The Box CTF machines, from recon and enumeration to foothold and more
Mini Shai-Hulud Worm Hits npm: TanStack and Mistral Among 160+ Packages Compromised in Massive Supply Chain Attack
Full list of 160+ packages compromised by the Mini Shai-Hulud worm, including TanStack, Mistral AI, and UiPath. Technical deep-dive and recovery
