The Great Password Heist (And Why Your “Password123” Isn’t Cutting It)

Hey Everyone,

After last year’s automation and tech modernisation, Santa’s workshop got a new makeover. McSkidy has a secure message portal where you can…

Introduction

The timeline between Easter and Christmas continues to destabilize. Deep within The Best Festival Company’s servers, Sir Carrotbane has…

Initial Access

The Easiest Way to install WiFite on ubuntu

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

PortSwigger Web Security Academy: All Path Traversal (also known as directory traversal) Labs Solved

Massive Slack Infrastructure Exposure leaked internal hostnames by CYBER KALKI after Hackerone closed report as informative Hey security folks, triagers, and Slack defenders — let’s talk …

Researchers, analysts, bug hunters, lend me your ears — I come to bury cyber threats, not inflict them…

Every once in a while, a vulnerability pops up in a place you’d least expect.  Not in a flashy marketing website.  Not in a forgotten…

Some bugs appear loud and obvious.  Others hide in the most unassuming places — like a simple env.js file sitting quietly in a public…

How AI chat platforms can leak private conversations — and how to fix them safely.

Upon visiting the website, we encounter what appears to be a careers microsite for Gigantic Retail. The site is entirely static and…

While poking around the digital infrastructure of popular restaurant discovery platform Zomato, security researcher pr0tagon1st stumbled…

This is a description the steps I took to solve Infinity Learning lab — EC2 Compromise[1]. It is classified as an medium AWS (Amazon Web…

The release of Python 3.14, released on October 7, 2025, marks a great milestone for the Python programming language. Developing a new…

Bu makine, ağ servislerinin (SMB, FTP) numaralandırılması (Enumeration), versiyon zafiyetlerinin tespiti ve bu servisler arasındaki…

Today we are going to solve the HTB web-challenge called Flag Command.