Explore The Hmmnm!!

Dive into cybersecurity, technology, and real-world experiences — all in one place.

Start Reading

The Hmmnm!! platform aims to provide hope and support to students and others through a wide range of resources, including educational materials, experience sharing, emotional assistance, and skill enhancement. It strives to address its reader's internal needs and aspirations, fostering growth in academic, personal, and professional domains through valuable experiences.

Security

Exploitation techniques, vulnerabilities, and defense strategies

View All →

Ransomware attack timeline showing major campaigns and payouts from 2016 to 2026

Ransomware Evolution 2016-2026: What Defenders Keep Missing

A decade analysis of ransomware evolution from 2016 to 2026, covering RaaS operations, double extortion, initial access brokers, living off...

Software supply chain security showing interconnected dependency nodes in secure pipeline with shield protecting code repository

Software Supply Chain Security: Risks in Dependencies, Builds, and Secrets

A practical guide to software supply chain security covering dependency risks, secrets exposure, CI/CD trust failures, artifact integrity verification, SBOM...

Featured image for the SSTI deep dive covering template injection detection, exploitation, and prevention

Deep Dive into Server-Side Template Injection (SSTI)

A deep dive into Server-Side Template Injection (SSTI) — how template engines turn attacker input into RCE, with discovery, exploitation...

HTTP request smuggling concept: front-end reads Content-Length while back-end reads Transfer-Encoding, splitting one request into two truths

Request Smuggling Explained: Detection and Mitigation in Depth

In-depth guide to HTTP request smuggling attacks. Learn how to exploit discrepancies between frontend proxies and backend servers in both...

Ten essential tips for ethical hackers shown as a terminal checklist with ticked todo items and a rules-of-engagement scope card

10 Essential Tips for Aspiring Ethical Hackers

10 essential tips for aspiring ethical hackers. Build your cybersecurity career with practical advice on certifications, tool proficiency, lab environments,...

Abstract visualization of an autonomous AI agent network with attack paths highlighted

Agentic AI Security: Attack Surface in Autonomous Systems

A practical guide to agentic AI security covering goal hijacking, tool misuse, identity and privilege abuse, memory poisoning, multi-agent trust...

Hooded figure with glowing circuit-pattern face launching prompt injection attacks, 2026 defense strategies featured image

Prompt Injection in 2026: Real Attacks & Defense Strategies

Prompt injection is the SQL injection of the AI era. In 2026, direct injection, indirect injection, and jailbreaking techniques are...

Featured: MCP security threats, test cases, and hardening

MCP Security and Pentesting: Threats, Test Cases, and Hardening

A comprehensive security assessment of the Model Context Protocol covering threat modeling, attack surface analysis, pentest methodologies, prompt injection test...

Identity security as the new perimeter concept showing user silhouettes with digital identity shields and authentication tokens in blue gradient

Identity Security: Modern Attacks on Users, Sessions & Trust

How identity became the new perimeter in modern cybersecurity. Explore MFA bypass techniques, OAuth consent phishing, device code attacks, token...

What Is MCP (Model Context Protocol)?

Model Context Protocol (MCP) is an open standard enabling AI assistants to communicate with external tools and data sources seamlessly....

Diagram of an API authorization flaw letting an attacker reach another user record

API Security: Authorization Flaws Behind Modern Breaches

A practical analysis of API security authorization flaws behind modern breaches. Covers BOLA, BFLA, IDOR, mass assignment, shadow APIs, and...

Error-based SQL injection concept: malicious query hitting a database cylinder which leaks data rows through a red XPATH error bubble

Error-Based SQL Injection: How It Works and How to Stop It

Learn error-based exploitation techniques used by pentesters to extract sensitive data from vulnerable applications. Covers SQL injection, SSTI, and other...

💻

Technology

MCP, APIs, cloud, and emerging tech deep dives

View All →

DragonForce implant routing hidden C2 rail through Microsoft Teams TURN relay cloud to attacker with zero owned infrastructure

Living Off Trusted Infrastructure: How Attackers Abuse Legitimate Services for C2

DragonForce's Backdoor.Turn routes ransomware C2 through Microsoft Teams TURN relays using anonymous visitor tokens — LOTI, living off trusted infrastructure....