Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Intro

Yet another LLMs cybersecurity issues: attackers can silently change your bot answers, and maybe yours…

Table of contents

Explore web attack forensics using Splunk.

Cross-Site Scripting (XSS) saldırıları, kötü amaçlı script’lerin normalde güvenilir ve zararsız olan web sitelerine enjekte edilmesiyle…

Node.js Security Essentials: Hardening Express with Ken Key Igniting a Secure Node Journey Seasoned engineer Ken Key has spent years turning raw JavaScript servers into resilient, audit-ready …

XSS walkthrough using reflected and stored payloads in TryHackMe’s AOC 2025 Day 11.

Solve TryHackMe’s AOC 2025 Day 17 room using CyberChef!

In this guide, we will break down the RootMe room from TryHackMe. This lab is a fantastic introduction to web exploitation, file upload…

The story continues, and the elves mount a rescue and will try to breach the Quantum Fortress’s defenses and free McSkidy

Messy write ups cause I never did one before but I just wanted to put this here cause I was FRUSTRATED with how stupid I am doing the…

In In December 2025, Stanford researchers ran a “Man vs. Machine” contest to see whether autonomous AI agents could outperform…

I've been hit with a sharper awareness of API security more than ever. Not in a dramatic way, but in a practical, everyday sense. APIs…

A real bug bounty case showing how a password reset token was leaked to a third-party analytics service, leading to account takeover

Several weeks ago, I was commissioned by a major financial consortium to advise on a recent security breach. The organization operated…

🎯 Challenge Information

People often think hacking is extremely difficult. In reality, a lot of hacking — especially against poorly maintained websites — is very…

What is Broken Authentication?