Urgent.News

What's breaking now, across thousands of outlets.

More in Tech

Self-hosting Hermes Agent on Railway: the dashboard that refuses to open unauthenticated

Full disclosure up front: I maintain a Railway template for this and get a kickback if you deploy through it. That's the whole pitch — everything below is the actual writeup.

  • Hermes Agent fails to open unauthenticated dashboard.
  • Railway injects PORT value during runtime, causing dashboard errors.
  • Author created wrapper for Railway deployment automating issues.

TryHackMe : Packed Light Writeup

TL;DR A .pcapng capture shows a victim host on 192.168.1.141 downloading a Python keylogger ( updates.py ) from an attacker-controlled "hotel update server" at byte-lotus-hotel.thm:8080 (…

  • Victim downloads Python keylogger from attacker-controlled server
  • Keylogger XOR-encrypts keystrokes with hardcoded key 'H'
  • Flag recovered by replaying XOR/base64 scheme on 30 exfiltrated requests

More from Tuesday 4 August →