File upload features are everywhere — profile pictures, reports, documents, logs.
Most developers treat them as low-risk functionality…

NOTE: This Research was kicked off as I found the Old TOR Domain of the group is being redirected to the current Onion URL, and new samples…

Look, we all know about Metasploit, Burp Suite, and Nmap. They’re the “popular kids” of the cybersecurity world — everyone talks about…

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

The SOC Playbook for CVE-2025–55182

DC-9 is a vulnerable boot-to-root machine that provides an excellent training ground for penetration testers preparing for certifications…

Race Conditions — Toy to The World

ICS/Modbus — Claus for Concern

At Intigriti, we host monthly web-based Capture The Flag (CTF) challenges as a way to engage with the security researcher community. December's challenge by Renwa took inspiration from the Marvel Ci...

بسم الله الرحمن الرحيم

How a simple error message led to a significant information disclosure

At the time of writing, December 24, 2025, the cybersecurity community has been left shaken by the emergence of CVE-2025–68613, which has…

Exploiting frontend cryptography to reset privileged accounts…

Container technologies have fundamentally transformed the landscape of modern software development, deployment, and operations…

Aikido Security became popular by cutting down on unnecessary alerts. By focusing on reachability, it helped developers avoid the…

Dulu, sistem pengiriman pesan (seperti email lama) hanya bisa membaca huruf dan angka (teks). Jika kamu mencoba mengirim file gambar atau…

I’ll walk you through the entire process of analyzing an APK, from decompilation to identifying security vulnerabilities.

มาต่อกันใน EP3 นะครับ จาก EP2 เราได้มีการอธิบายถึงการทำ User Enumeratio nและความสำคัญของการตั้ง password ไปแล้ว