Access Control Vulnerabilities

Executive Summary

Containers — DoorDasher’s Demise

Introduction

Penetration Testing Report

When I saw that Day 14 was about containers and Docker, I was weirdly excited. Containers are everywhere in modern infrastructure, and as…

A detailed walkthrough of the Creative room on TryHackMe, demonstrating subdomain enumeration, SSRF exploitation, and privilege escalation…

As cyber threats grow more advanced, organizations across the globe are facing a critical challenge — how to protect their systems, data…

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Free Link 🎈

If you’ve worked in software development recently, you’ll know that most modern applications don’t go live without some form of security…

Advent of Cyber 2025 BY ::-> TRedEye

I built this lab to practice API security and improve my understanding of how poorly implemented JSON Web Tokens (JWTs) can put an entire…

🏥 The Security Challenge Nobody Talks About

CDK (Container DucK), herhangi bir işletim sistemi bağımlılığı olmaksızın, konteynerlerde zaafiyer sömürmek için tasarlanmış, açık kaynaklı…

I wrote this as an easy reference to capture required fundamental knowledge and also a high-level overview of the more common exploitation…

I’ve been slowly working through TryHackMe’s Advent of Cyber 2025, not just to farm badges, but to treat it like a mini blue-team…

Explore web attack forensics using Splunk.

TBFC’s drone scheduler web UI is getting strange, long HTTP requests containing Base64 chunks. Splunk raises an alert: “Apache spawned an…

Advent of Cyber 2025 BY ::-> TRedEye

Neerav Patel (Cybe