hackerswar — offensive security & AI notes

Trail of Breadcrumbs

How a forgotten .DS_Store file unraveled an entire HTB box.

HackTheBox Recon LFI JWT

14 min Medium

Apr 21, 2026

#006

AI Security

The Quiet Supply Chain

Prompt injection through a vendor's documentation site.

LLM Prompt Injection Supply Chain

OSCP, Honestly

Six months in, two attempts, one pass. A frank field report.

OSCP OffSec Certification

Race Condition in the Cookie Jar

A 4ms window that printed money for two weeks.

Race Condition Web Auth

Notes on Defender's New AMSI Heuristics

What changed in the April update, and what still works.

Burp Suite, From Absolutely Scratch

A 90-minute tutorial for the person who installed it last week.

Kerberoasting Still Works in 2026

And probably will in 2030. Here is why.

AD Kerberos Windows

9 min Medium