Popular

This time, we will study the basics of penetration tests using TryHackMe's Basic Pentesting. Please note that the explanation is a spoiler for "TryHackMe-Basic Pentesting: https://tryhackme.com/room/basicpentestingjt". Preparation First, target...

"The time has come for AI to create websites" -- such words are no longer special. Among them, I found Readdy, an AI service that automatically creates cool web pages by simply entering the prompt (natural language).

This time, we will try "Elevation of privileges using SUID/SGID executables (excluding known exploits)." The target machine uses the Room below of TryHackMe. "TryHackMe-Linux PrivEsc: https://tryhackme.com/room/linuxprivesc" This article is about Par...

Vercel is widely used as a hosting platform for Next.js apps. While it's easy to get started with the free plan (Hobby), the paid plan (Pro) has features that are essential for large-scale development. In this article, we will introduce the [2025 edition] to the full version of Vercel's free plans vs paid plans...

This time, we will use SSH2John to extract the hash from the private key using TryHackMe's Overpass, and then identify the password using John the Ripper. Overpass is even escalated to privileges, so I hope you can do it until the end! "TryHackMe-Overpass: https://t...

Security measures are unavoidable when developing web applications. Among them, "SQL injection" is known as a serious threat to databases. In this article, we will explain in an easy-to-understand manner how SQL injection works, and we will explain what it actually is...

This time, we will try escalating privileges using "GTFOBins." The target machine uses the Room below of TryHackMe. "TryHackMe-Linux PrivEsc: https://tryhackme.com/room/linuxprivesc" This article is part 3. TryHackMe for Linux PrivEsc...

This time, we will try escalating privileges using the LINUX environment variables "LD_PRELOAD" and "LD_LIBRARY_PATH". The target machine uses the Room below of TryHackMe. "TryHackMe-Linux PrivEsc: https://tryhackme.com/room/linuxprivesc" This article is about Par...

This time, we'll try out Buffer Overflow. Building an environment is also difficult, so I'll be studying at the Room below on TryHackMe. "TryHackMe-Buffer Overflows: https://tryhackme.com/room/bof1" Please note that the explanation is a spoiler. Introd...

This time, we will take advantage of the CVE-2019-9053: CMS Made Simple's SQL injection vulnerability to infiltrate the target machine and even escalate privileges. The target machine uses "TryHackMe-Simple CTF: https://tryhackme.com/room/easyctf". The explanation is about the topic...