My name is Ignacio Jose Riva, and I am a full-time Bug Bounty Hunter actively working in platforms like Bugcrowd, Intigriti, Hackerone, etc…

The Story

Think you need to be a criminal mastermind to hack? Think again. Legitimate bug hunting lets you get paid to break into systems — and it…

Detect command-and-control traffic using RITA and Zeek logs in Advent of Cyber 2025 Day 22 room.

In the Advent of Cyber 2025 - Day 22 room, that’s exactly where TBFC is. Multiple attacks, weird behavior, and then… silence. Too quiet…

Explore how to analyze a large PCAP and extract valuable information.

The Story

AWS IAM privilege escalation does not always rely on directly assuming roles or attaching policies. In many real-world environments…

Learn how to exploit a race condition attack to oversell the limited-edition SleighToy.

Learn to identify and exploit weaknesses in ICS systems.

Uncovering Malicious Communications Through Network Analysis with RITA

Introduction

What started as a 100% women-focused AI aesthetic is quietly evolving: the last 48 hours show a clear transition

Website security in 2025 is non-negotiable. With hackers getting smarter, it’s crucial to protect your website from potential threats…

A bug bounty story where an SSRF chain unlocked internal access and led to a critical payout — here’s the full breakdown

1.General Description of the Web Application:

The biggest “library heist” in internet history has occurred. 86 million songs have dissolved into the dark waters of decentralized…

In Mid-December 2025, Hackers Stole Paid Members’ Pornhub Browsing and Intimate Data The 2025 Pornhub Data Breach and the Collapse of Digital Anonymity The December 2025 security incident involving …

En este write-up se documenta la resolución paso a paso de la máquina Runers de The Hackers Labs, clasificada como dificultad Easy…

C2 Detection — Command & Carol