German grind, new job, and teaching pentesting to uni students across Syria. No time to post. barely time to sleep.
but I'm back. GYM, YT, time management, HTB machines & challenges :B
2 weeks ago I participated in HTB CTF &
yesterday I dropped a video
youtu.be/y_4i0MykzjQ
After a month break, I'm back!
New HackTheBox walkthrough: Kobold
MCPJam CVE-2026-23744 RCE (no auth, direct spawn) → PrivateBin template cookie traversal → Docker privileged container escape.
youtu.be/tLMPtvQzXC8
#HackTheBox #Docker #ContainerEscape #MCPJam #CVE
A few weeks ago, I noticed the Syrian flag in the @hackthebox_eu country rankings was still the one tied to the former (Assad) government.
I reached out to the HTB team and asked if it could be updated to the current Syrian flag. Today, I saw the change went live :D
#HackTheBox
Exactly one year ago, I left my job and started my cybersecurity journey.
One year later:
OSCP
PNPT
PT1
eJPT
Now working as a Penetration Tester.
A huge thank you to everyone and the platforms that played a role in the journey: @TCMSecurity @offsectraining @tryhackme @ine <3
Quick update regarding the fake CredSpray repository:
GitHub has now removed both the malicious repo and the associated account :P after multiple reports from the community. Thanks everyone who helped report it.
Official repository:
github.com/strikoder/CredSpr…
I may not have the best rank nor the best tier, but at least I'm trying my best.
@hackthebox_eu
#HTBXP
Excited to share that I’ve passed the OSCP+ (Offensive Security Certified Professional Plus) exam by @offsectraining !!!
I wrote and published a review video, make sure to check them!
Medium: medium.com/@strikoder/striko…
YT: youtube.com/watch?v=9HFKfGs6…
#offsec #oscp #pentesting #cyber
New OSCP Resource Alert!!!
Just dropped the complete OSCP report guide using SysReptor.
If you're planning to take OSCP or already scheduled your exam, watch this before you submit anything (espeically the watermark tip).
youtu.be/dT7XgN8uuSU
#OSCP #Report #sysreptor
Sorry everyone, I'm late (again) as I was taking the OSCP !
New HackTheBox walkthrough: Snapped
Nginx UI CVE-2026-27944 backup extraction → bcrypt cracking → dual privesc paths (snap CVE-2026-3888 + kernel copy-fail CVE-2026-31431).
Enjoy the video!
youtu.be/TBGtrUOu4e4
Back from vacation mode!
Publishing HTB UpDown: only 5K solves despite being on every OSCP list. People skip it because "it's just PHP wrappers."
Bad move. PHP filter chains, phar inclusion, and disabled_functions bypasses are critical for OSCP.
youtu.be/aWq1d5ewfPg
#OSCP
New HackTheBox walkthrough: Expressway
UDP enumeration → IPsec IKE aggressive mode → PSK cracking → CVE-2025-32463 sudo privilege escalation.
VPN pentesting meets modern privesc.
youtu.be/RsoQJJvo8Is
#HackTheBox #VPN #IPsec
New video - HTB Sherlock: Meerkat
investigated a BonitaSoft exploit that led to SSH backdoors and data exfil. good practice if you're studying incident response or prepping for OSCP
youtu.be/1Qq32NW9l-s
used wireshark, jq, and some other tools. scripts are up on github
After a long break, I'm officially back.
New HackTheBox walkthrough: Next.js CVE-2025 LFI and Terraform privilege escalation from enumeration to root.
youtu.be/DTeTx3HInyM
More content coming soon. Thanks for sticking around.
#HackTheBox #OSCP #Cybersecurity
New HTB video up - Editor machine
Chained CVE-2024-24893 for the foothold and CVE-2024-32019 to get root.
youtu.be/0MxcgOs62YY
commands: github.com/strikoder/CTFS/bl…
#HackTheBox #OSCP #pentesting #editor













