corpus.blog
41554 blogs · [ { "id": "01a087bc-4bed-70e4-93bd-98c0c7313bbb", "title": "Management Wants a Word — TryHackMe Hacker Holidays 2026 Day 14 Writeup", "url": "https://paolocostanzo.github.io/ctf/hacker-holidays-2026/management-wants-a-word/", "published_at": "2026-08-09T00:00:00+00:00" }, { "id": "01a087bc-4bed-70e4-93bd-98c0c7abb6e8", "title": "The Guestbook — TryHackMe Hacker Holidays 2026 Day 13 Writeup", "url": "https://paolocostanzo.github.io/ctf/hacker-holidays-2026/the-guestbook/", "published_at": "2026-08-08T00:00:00+00:00" }, { "id": "01a087bc-4bed-70e4-93bd-98c0c7ca9ec8", "title": "After Hours — TryHackMe Hacker Holidays 2026 Day 12 Writeup", "url": "https://paolocostanzo.github.io/ctf/hacker-holidays-2026/after-hours/", "published_at": "2026-08-07T00:00:00+00:00" }, { "id": "01a087bc-4bec-7283-9b9d-3b248f2c6e0f", "title": "CTF Writeups — Hacker Holidays 2026 (Byte Lotus Hotel)", "url": "https://paolocostanzo.github.io/ctf/hacker-holidays-2026/", "published_at": "2026-08-06T00:00:00+00:00" }, { "id": "01a087bc-4bed-70e4-93bd-98c0c8c5220a", "title": "Infinity Pool — TryHackMe Hacker Holidays 2026 Day 11 Writeup", "url": "https://paolocostanzo.github.io/ctf/hacker-holidays-2026/infinity-pool/", "published_at": "2026-08-06T00:00:00+00:00" }, { "id": "01a087bc-4bed-70e4-93bd-98c0c9bd074a", "title": "The Hollow Shell — TryHackMe Hacker Holidays 2026 Day 10 Writeup", "url": "https://paolocostanzo.github.io/ctf/hacker-holidays-2026/the-hollow-shell/", "published_at": "2026-08-05T00:00:00+00:00" }, { "id": "01a087bc-4bed-70e4-93bd-98c0cabadd56", "title": "CryptoCabana — TryHackMe Hacker Holidays 2026 Day 9 Writeup", "url": "https://paolocostanzo.github.io/ctf/hacker-holidays-2026/cryptocabana/", "published_at": "2026-08-04T00:00:00+00:00" }, { "id": "01a087bc-4bed-70e4-93bd-98c0cb3480c7", "title": "Towel on the Sunbed — TryHackMe Hacker Holidays 2026 Day 8 Writeup", "url": "https://paolocostanzo.github.io/ctf/hacker-holidays-2026/towel-on-the-sunbed/", "published_at": "2026-08-03T00:00:00+00:00" }, { "id": "01a087bc-4bed-70e4-93bd-98c0cb5bb4f7", "title": "Do Not Disturb — TryHackMe Hacker Holidays 2026 Day 7 Writeup", "url": "https://paolocostanzo.github.io/ctf/hacker-holidays-2026/do-not-disturb/", "published_at": "2026-08-02T00:00:00+00:00" }, { "id": "01a087bc-4bed-70e4-93bd-98c0cbeeb659", "title": "Overheard at Breakfast — TryHackMe Hacker Holidays Day 6 Writeup", "url": "https://paolocostanzo.github.io/ctf/hacker-holidays-2026/overheard-at-breakfast/", "published_at": "2026-08-01T00:00:00+00:00" }, { "id": "01a087bc-4bed-70e4-93bd-98c0cc9587c8", "title": "Beach Bar — TryHackMe Hacker Holidays 2026 Day 5 Writeup", "url": "https://paolocostanzo.github.io/ctf/hacker-holidays-2026/beach-bar/", "published_at": "2026-07-31T00:00:00+00:00" }, { "id": "01a087bc-4bed-70e4-93bd-98c0cd482c43", "title": "Packed Light — TryHackMe Hacker Holidays 2026 Day 4 Writeup", "url": "https://paolocostanzo.github.io/ctf/hacker-holidays-2026/packed-light/", "published_at": "2026-07-30T00:00:00+00:00" }, { "id": "01a087bc-4bed-70e4-93bd-98c0ce0680e6", "title": "Complimentary — TryHackMe Hacker Holidays 2026 Day 3 Writeup", "url": "https://paolocostanzo.github.io/ctf/hacker-holidays-2026/complimentary/", "published_at": "2026-07-29T00:00:00+00:00" }, { "id": "01a087bc-4bed-70e4-93bd-98c0d011f178", "title": "MCP 2026-07-28: Stateless Does Not Mean State-Free", "url": "https://paolocostanzo.github.io/mcp-2026-07-28-stateless-security/", "published_at": "2026-07-29T00:00:00+00:00" }, { "id": "01a087bc-4bed-70e4-93bd-98c0ce933aa5", "title": "Room 404 — TryHackMe Hacker Holidays 2026 Day 2 Writeup", "url": "https://paolocostanzo.github.io/ctf/hacker-holidays-2026/room-404/", "published_at": "2026-07-28T00:00:00+00:00" }, { "id": "01a087bc-4bed-70e4-93bd-98c0cea9ec29", "title": "The Concierge Knows Too Much — TryHackMe Hacker Holidays Day 1 Writeup", "url": "https://paolocostanzo.github.io/ctf/hacker-holidays-2026/the-concierge-knows-too-much/", "published_at": "2026-07-27T00:00:00+00:00" }, { "id": "01a087bc-4bed-70e4-93bd-98c0cfa7fa49", "title": "The Brochure — TryHackMe Hacker Holidays 2026 Day 0 Writeup", "url": "https://paolocostanzo.github.io/ctf/hacker-holidays-2026/the-brochure/", "published_at": "2026-07-25T00:00:00+00:00" }, { "id": "01a087bc-4bed-70e4-93bd-98c0d09f6134", "title": "Wearable Biometric Telemetry: Technical Tear-down and Data Supply Chain", "url": "https://paolocostanzo.github.io/oura-palantir-biometrici/", "published_at": "2026-05-24T00:00:00+00:00" }, { "id": "01a087bc-4bed-70e4-93bd-98c0d1917ebe", "title": "Coordinated Abuse Network on Telegram: Content Moderation, Payment Rails and Regulatory Response", "url": "https://paolocostanzo.github.io/rape-academy-cnn-threat-intel/", "published_at": "2026-04-21T00:00:00+00:00" }, { "id": "01a087bc-4bed-70e4-93bd-98c0d1bff38b", "title": "Anatomy of a TRON Wallet Drainer-as-a-Service", "url": "https://paolocostanzo.github.io/crypto-drainer-svuotatasche/", "published_at": "2026-04-07T00:00:00+00:00" }, { "id": "01a087bc-4bed-70e4-93bd-98c0d253353a", "title": "SSRF → IMDSv1: Exfiltrating IAM Credentials from an EC2 Instance", "url": "https://paolocostanzo.github.io/ssrf-imds-ec2-credentials/", "published_at": "2026-03-31T00:00:00+00:00" }, { "id": "01a087bc-4bed-70e4-93bd-98c0d319c10b", "title": "Evil Portal, Beacon Spam and Deauth: a €40 Hardware Wi-Fi Lab", "url": "https://paolocostanzo.github.io/cardputer-adv-wifi-security/", "published_at": "2026-03-21T00:00:00+00:00" }, { "id": "01a087bc-4bed-70e4-93bd-98c0d3c7815b", "title": "Operation Epic Fury: Independent OSINT Analysis of a Dual-Platform Campaign", "url": "https://paolocostanzo.github.io/operation-epic-fury-cyber-war-iran/", "published_at": "2026-03-17T00:00:00+00:00" }, { "id": "01a087bc-4bed-70e4-93bd-98c0d44e47e4", "title": "TIM, GeForce Now and the ICMP Black Hole", "url": "https://paolocostanzo.github.io/tim-packet-loss-gfn/", "published_at": "2026-03-10T00:00:00+00:00" }, { "id": "01a087bc-4bed-70e4-93bd-98c0d45bc9f2", "title": "AWS IAM: Five Recurring Misconfigurations and How to Fix Them", "url": "https://paolocostanzo.github.io/aws-iam-misconfiguration/", "published_at": "2026-03-01T00:00:00+00:00" }, { "id": "01a087bc-4bed-70e4-93bd-98c0d499a3de", "title": "Prompt Injection on Enterprise LLMs: Attack Surface and Mitigations", "url": "https://paolocostanzo.github.io/prompt-injection-llm/", "published_at": "2026-03-01T00:00:00+00:00" } ] posts Claim your blog
Back to paolocostanzo.github.io
Blog · corpus.blog/blogs/paolocostanzo.github.io/posts

paolocostanzo.github.io

paolocostanzo.github.io

2026

Management Wants a Word — TryHackMe Hacker Holidays 2026 Day 14 Writeuporiginal ↗
9 Aug 2026
The Guestbook — TryHackMe Hacker Holidays 2026 Day 13 Writeuporiginal ↗
8 Aug 2026
After Hours — TryHackMe Hacker Holidays 2026 Day 12 Writeuporiginal ↗
7 Aug 2026
CTF Writeups — Hacker Holidays 2026 (Byte Lotus Hotel)original ↗
6 Aug 2026
Infinity Pool — TryHackMe Hacker Holidays 2026 Day 11 Writeuporiginal ↗
6 Aug 2026
The Hollow Shell — TryHackMe Hacker Holidays 2026 Day 10 Writeuporiginal ↗
5 Aug 2026
CryptoCabana — TryHackMe Hacker Holidays 2026 Day 9 Writeuporiginal ↗
4 Aug 2026
Towel on the Sunbed — TryHackMe Hacker Holidays 2026 Day 8 Writeuporiginal ↗
3 Aug 2026
Do Not Disturb — TryHackMe Hacker Holidays 2026 Day 7 Writeuporiginal ↗
2 Aug 2026
Overheard at Breakfast — TryHackMe Hacker Holidays Day 6 Writeuporiginal ↗
1 Aug 2026
Beach Bar — TryHackMe Hacker Holidays 2026 Day 5 Writeuporiginal ↗
31 Jul 2026
Packed Light — TryHackMe Hacker Holidays 2026 Day 4 Writeuporiginal ↗
30 Jul 2026
Complimentary — TryHackMe Hacker Holidays 2026 Day 3 Writeuporiginal ↗
29 Jul 2026
MCP 2026-07-28: Stateless Does Not Mean State-Freeoriginal ↗
29 Jul 2026
Room 404 — TryHackMe Hacker Holidays 2026 Day 2 Writeuporiginal ↗
28 Jul 2026
The Concierge Knows Too Much — TryHackMe Hacker Holidays Day 1 Writeuporiginal ↗
27 Jul 2026
The Brochure — TryHackMe Hacker Holidays 2026 Day 0 Writeuporiginal ↗
25 Jul 2026
Wearable Biometric Telemetry: Technical Tear-down and Data Supply Chainoriginal ↗
24 May 2026
Coordinated Abuse Network on Telegram: Content Moderation, Payment Rails and Regulatory Responseoriginal ↗
21 Apr 2026
Anatomy of a TRON Wallet Drainer-as-a-Serviceoriginal ↗
7 Apr 2026
SSRF → IMDSv1: Exfiltrating IAM Credentials from an EC2 Instanceoriginal ↗
31 Mar 2026
Evil Portal, Beacon Spam and Deauth: a €40 Hardware Wi-Fi Laboriginal ↗
21 Mar 2026
Operation Epic Fury: Independent OSINT Analysis of a Dual-Platform Campaignoriginal ↗
17 Mar 2026
TIM, GeForce Now and the ICMP Black Holeoriginal ↗
10 Mar 2026
AWS IAM: Five Recurring Misconfigurations and How to Fix Themoriginal ↗
1 Mar 2026
Prompt Injection on Enterprise LLMs: Attack Surface and Mitigationsoriginal ↗
1 Mar 2026