Classroom

CTF walkthroughs, malware analysis, penetration testing, and security research by Animesh Roy.

TryHackMe Juicy: XSS to SSRF via unsanitised LLM output

Attacking LLMs

Juicy: XSS to SSRF via unsanitised LLM output

TryHackMe Model Poisoning: supply chain and training data attacks

Attacking LLMs

Model Poisoning: supply chain and training data attacks

TryHackMe LLM Output Handling: XSS and RCE via model output

Attacking LLMs

LLM Output Handling: XSS and RCE via model output

TryHackMe Ninja Skills: Linux file inspection with find and stat

Linux fundamentals

Ninja Skills: Linux file inspection with find and stat

TryHackMe IronShade: Linux honeypot compromise investigation

Linux forensics

IronShade: Linux honeypot compromise investigation

TryHackMe TShark Challenge II: PCAP analysis and VirusTotal triage

TShark

TShark Challenge II: PCAP analysis and VirusTotal triage

TryHackMe Bricks Heist: CVE-2024-25600 RCE to cryptominer forensics

CVE-2024-25600

Bricks Heist: CVE-2024-25600 RCE to cryptominer forensics

TryHackMe Mr. Phisher: VBA macro XOR flag extraction

Phishing

Mr. Phisher: VBA macro XOR flag extraction

TryHackMe WAF Exploitation Techniques: encoding and evasion

Bypassing WAF

WAF Exploitation Techniques: encoding and evasion

TryHackMe WAF Introduction: from packet filters to OWASP CRS rules

Bypassing WAF

WAF Introduction: from packet filters to OWASP CRS rules