A practical guide to Docker container escape techniques, covering misconfigurations, privileged containers, capability abuse, and kernel exploits. Understanding these attacks is essential for building secure containerized infrastructure.

Deep dive into a path traversal vulnerability in an OTA update system that bypasses staged validation, allowing arbitrary file writes during updates.

Deep dive analysis of CVE-2025-9074, a critical Docker Desktop vulnerability that allowed container escape through unauthenticated API access

An in-depth review of Hack The Box's most challenging web security certification. Learn about the training quality, exam structure, and what it takes to master advanced web exploitation techniques.

Complete writeup for all web challenges from CIT CTF 2025, including SSTI exploitation, LFI bypasses, git repository enumeration, and SQL injection techniques.

How Git Fetch Resulted in Critical Remote Code Execution in Gitea.

A casual day of hunting bugs turned into a serious jackpot thanks to some forgotten open source library. This vulnerability allowed for complete account takeover through stored XSS.

HTB DoxPit challenge walkthrough featuring a mix of vulnerabilities in Flask and NextJS applications. A methodical approach to exploiting web application flaws.