TryHackMe
Rooms walked through with the detection and defense angle included.
- •9 min read•os-internalsvulnerability-research
Copy Fail: CVE-2026-31431 (TryHackMe)
Exploit copy-fail, a kernel LPE that corrupts any file's page cache to gain root in seconds.
- •6 min read•cloud-securitydetection-engineering
Cloud Security Pitfalls - TryHackMe Writeup
A friendly, SOC-focused walkthrough of cloud migration risks, shared responsibility, logging challenges, and practical monitoring takeaways.
- •3 min read•malware-analysisdetection-engineering
Probably Just Fine - TryHackMe First Shift CTF Writeup
A step-by-step SOC investigation through TryHackMe's First Shift CTF scenario, covering threat intel lookups, file hash analysis, and report-driven attribution insights.
- •9 min read•reverse-engineeringmalware-analysis
x86 Architecture for Malware Analysis - TryHackMe Writeup
A comprehensive guide to x86 CPU architecture fundamentals essential for malware reverse engineering. Learn about registers, memory layout, and stack operations that form the foundation of system exploitation.
- •10 min read•reverse-engineeringmalware-analysis
Mastering Obfuscation Principles - TryHackMe Writeup
A comprehensive guide to understanding obfuscation techniques for malware evasion, from basic concatenation to advanced control flow manipulation. Learn how attackers hide their code and how defenders can spot these techniques.
- •13 min read•recondetection-engineering
Understanding the Cyber Kill Chain - TryHackMe Writeup
A comprehensive walkthrough of TryHackMe's Cyber Kill Chain room, exploring each phase of cyber attacks from reconnaissance to actions on objectives, plus a real-world analysis of the Target data breach.
- •5 min read•toolingweb-security
cURL Exploitation - Hoperation Eggsploit TryHackMe
A hands-on walkthrough of TryHackMe's cURL exploitation room - learning HTTP requests, POST data, cookies, sessions, and brute force attacks from the command line.
- •4 min read•vulnerability-researchweb-security
Django CVE-2025-64459: ORM Query Injection Explained
A friendly walkthrough of Django CVE-2025-64459 - understanding and exploiting ORM query parameter injection vulnerabilities in web applications.
- •5 min read•web-securityforensics
TryHackMe: Web Attack Forensics - Drone Alone
A comprehensive blue team investigation walkthrough of the TryHackMe Web Attack Forensics room, analyzing malicious web activity and command injection attacks using Splunk.
- •5 min read•cryptographypassword-security
TryHackMe: Passwords - A Cracking Christmas
A comprehensive walkthrough of the TryHackMe Passwords room, exploring password-based encryption attacks and defensive strategies during the holiday season.