Welcome back to the third installment of the “Building a Production Server from Scratch — The Ultimate Guide” series!

This article will provide essential information on identifying and understanding JSON Web Token (JWT) vulnerabilities. It explains how JWTs…

Complete Walkthrough & Learning Guide

Welcome to this new Medium post, in this one I will show you an interesting technique for infrastructure resilience in our C2 Server based…

Ağ güvenliği dünyasında log’lar çoğu zaman yeterli görünse de, saldırganların izlerini gerçekten anlayabilmek için veri paketlerinin…

This article is based on a TryHackMe room. It focuses on the methodology and reasoning rather than reproducing the original tasks or…

Bu makine, sistem yöneticilerinin yaptığı en temel ama en ölümcül hatayı gözler önüne seriyor: Servislerin İzolasyon Eksikliği. FTP ve Web…

Learn about types of XSS vulnerabilities and how to prevent them.

Remember when you thought your React app with that sweet Server-Side Rendering was secure? Yeah, about that…

Hello, fellow nerds!

Broken Object Property Level Authorization (BOPLA — API3:2023) is a critical vulnerability listed in the OWASP API Security Top 10. It…

Alpine is an easy difficulty machine. Do you wish to go skiing, or maybe to book a two-night trip to the mountain? Then this linux room is…

Beginner HackTheBox Crocodile machine writeup covering FTP enumeration, web exploitation, credential discovery, and basic penetration…

Complete HackTheBox Archetype machine writeup featuring MSSQL exploitation through SMB enumeration, xp_cmdshell command execution, and…

Scenario

my bitcoin was stolen how can I recover it” Scanner Hacker Crypto Recovery maintains full compliance with all applicable laws and regulations. Their services are conducted with complete …

Introduction
You have probably heard the term “API” before, maybe when using apps like Spotify, Instagram or online banking among others…

Hi, I’m Mohamed Kamal, Offensive Security Engineer and bug bounty hunter

Stop learning 50 tools — master the one that actually finds real money bugs.

Descubre cómo la falla API9 (Improper Inventory Management) expone APIs Zombie y Shadow para un Bypass de seguridad crítico.

⚡Quick Overview