A technically rigorous, step-by-step walkthrough of how egghunters work, how to build them from scratch using the Keystone assembler, and how to weaponize them against a real 32-bit network service...

A deep, beginner-friendly, and technically rigorous walkthrough of how Windows Structured Exception Handling works, how attackers abuse it to hijack execution, and how modern defenses try to stop t...

HackTheBox — Blackout Ops [Easy] In this write-up, we will solve the Blackout Ops challenge from HackTheBox. The goal is to analyze the web application, identify its weaknesses, and use them to ga...

HackTheBox — ProxyAsAService [Easy] In this write-up, we will solve the ProxyAsAService challenge from HackTheBox. The goal is to analyze the web application, identify its weaknesses, and use them...

HackTheBox — NeoVault [VeryEasy] In this write-up, we will solve the NeoVault challenge from HackTheBox. The goal is to analyze the web application, identify its weaknesses, and use them to gain c...

HackTheBox — JSCalc [Easy] In this write-up, we will solve the JSCalc challenge from HackTheBox. The goal is to analyze the web application, identify its weaknesses, and use them to gain command e...

HackTheBox — Neonify [Easy] In this write-up, we will solve the Neonify challenge from HackTheBox. The goal is to analyze the web application, identify its weaknesses, and use them to gain command...

Sendai Hello Friends, Remo is Back In this write-up, I’ll walk through how I pwned the Sendai machine from VulnLab. From initial enumeration to gaining root access, I’ll explain the key steps, t...

Phantom Hello Friends, Remo is Back In this write-up, I’ll walk through how I pwned the Phantom machine from VulnLab. From initial enumeration to gaining root access, I’ll explain the key steps,...

Media Hello Friends, Remo is Back In this write-up, I’ll walk through how I pwned the Media machine from VulnLab. From initial enumeration to gaining root access, I’ll explain the key steps, too...