Blog

• Mar 15, 2026

  The Terraform Provider Block You Forgot to Write

  Why Terraform can appear to work without an explicit root provider block, and how hidden local AWS configuration can mask incomplete provider setup.

  terraform aws infrastructure-as-code tutorials
• Mar 7, 2026

  A Workaround for Kali's Pre-Built VMware Image Multi-Monitor Issues

  A workaround for multi-monitor display issues in Kali Linux on VMware Workstation.

  kali vmware linux tutorials
• Jun 22, 2025

  Titanic

  A walkthrough of HackTheBox's Titanic – directory traversal, Gitea database extraction, and an ImageMagick CVE for root.

  hack-the-box easy cve
• Jun 19, 2025

  Strutted

  A walkthrough of HackTheBox's Strutted – CVE-2024-53677 Apache Struts RCE, hardcoded Tomcat credentials, and tcpdump sudo escalation to root.

  hack-the-box medium struts
• Jun 14, 2025

  Underpass

  A walkthrough of HackTheBox's Underpass – DaloRadius default credentials, hash cracking, and Mosh for root.

  hack-the-box easy mosh
• Jun 6, 2023

  Soccer

  A walkthrough of HackTheBox's Soccer – default credentials, PHP upload RCE, WebSocket boolean SQLi, and doas/dstat privilege escalation.

  hack-the-box easy SQLi
• Apr 28, 2023

  MetaTwo

  A walkthrough of HackTheBox's MetaTwo – SQLi, WordPress XXE, FTP credential extraction, and PGP key cracking.

  hack-the-box easy SQLi CVE wordpress