Every pentester knows the feeling: you just wrapped up a box, the dopamine is still tracing through your veins, and you instantly want that next hit. Having just cleared System, I wasn’t looking fo...

The decision to tackle System, a vulnerable Linux machine created by avijneyam and hosted on HackMyVM was driven specifically by the hunt for a challenge focused on XML External Entity (XXE) vulner...

The alarm doesn’t sound. The cameras don’t blink. There are no ski masks, no getaway cars, and no bags with dollar signs on them. Yet, in less than twenty minutes, a secure financial institution ha...

In our previous posts, we built a solid foundation by conquering the 1-star and 2-star levels. Now, it is time to step up our game. We are officially moving to the 3-star difficulty tier on the sco...

In the previous post, we kicked things off by covering the entry level 1-star challenges to build up our foundation. In this post, we are officially moving up a level to tackle the more advanced 2-...

OWASP Juice Shop features challenges ranging across multiple difficulty levels, from beginner friendly 1 star tasks to expert level 6 star exploits. In this post, we will be diving into the 1 star ...

When you think of learning cybersecurity, you might picture dry textbooks, endless lines of confusing code, or boring compliance videos. But what if you could learn how to defend web applications b...

Welcome to my writeup for BITB, a custom built (Linux) machine available for download on HackMyVM. The concept for this machine was born after I developed a demonstration tool named RED-BITB, desig...

Between all the fun family plans this weekend, I finally found some downtime to hack a straightforward machine on HackMyVM called Twelve. Getting started Before diving into the hack, it is crucial...

Today, we are taking a trip down memory lane with a medium Linux machine from HackMyVM called Oldschool. The name reminds us of the classic, older techniques that the veterans in our field often ta...