-
THM The Hollow Shell
Introduction The Hollow Shell is another resort-themed box from TryHackMe’s Hacker Holidays run, and this one lives entirely in a zip file. Upload the wrong kind of archive to a “shell delivery” service and the server will happily write your files anywhere on disk it can reach. That’s Zip Slip, and this room chains it…
-
THM Beach Bar
Introduction I’ve been working through TryHackMe’s Hacker Holidays 2026 event, a free 14-day run of rooms set in a five-star resort with a zero-star security posture. Beach Bar, a beginner Linux box, chains three real production mistakes: exposed credentials, remote code execution through unsafe YAML deserialization, and a root password sitting in plain sight. This…
-
Google’s Python in cybersecurity – Part II
Introduction Continuing the Google’s Cybersecurity Professional Certificate adventure, and more specifically Python in cybersecurity, today part II. As always, I’ll share the cliff notes on the courses as I go. Dense summaries of what actually matters. As said: Automate Cybersecurity Tasks with Python – Part II Continuing where we left off Cybersecurity generates oceans of…
-
Google’s Python in cybersecurity – Part I
Introduction Another post in the Google’s Cybersecurity Professional Certificate series. As always, I’ll share the cliff notes on the courses as I go. Dense summaries of what actually matters. Today: Automate Cybersecurity Tasks with Python – Part I Python for cybersecurity The Python course was by far the most comprehensive and quite frankly, also the…