while hunting on university site i got information disclosure

From Burning Out to Breaking In: How We Traded Our Old Keys for a Legal Lockpick.

Target: Skynet (TryHackMe)

Hello, stranger — let’s begin.

Step 1: Testing Functionality

A step-by-step SMB2 traffic analysis and decryption walkthrough

Relevant — TryHackMe (PT-BR) Introdução Hoje vamos explorar a máquina Relevant do TryHackMe disponível no path de Offensive Security que envolve os seguintes conhecimentos: • Enumerar e …

“Imagine you sign up as a normal user…and two minutes later you’re editing the admin’s settings without ever touching their password.”…

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

CloudSEK conducted their Hiring CTF Round 1 on 6th December 2025, consisting of four challenges designed to test practical security…

When people hear the word hacker, they often imagine a person behind a laptop typing endlessly.
 In reality, modern cybersecurity research…

Siber güvenlik yalnızca yazılımdan ibaret değil. Fiziksel donanımlar, RF araçları, NFC okuyucular ve özel adaptörler; gerçek dünyadaki…

How exposed JavaScript source maps led to sandbox escape and remote code execution in an AI platform

Subtitle: From Passive Collection to Actionable Intelligence — A Professional’s Guide to Finding What Others Miss

How a harmless-looking parameter turned login into credential theft

There is a quiet belief spreading through engineering teams right now.

This is a description the steps I took to solve the Infinity Learning lab: KeyMaster — Decoding S3 Secrets [1]. It is classified as a…

Why security failures hit differently in high-sensitivity platforms

Description

Learn how misconfigured GraphQL endpoints can be exploited using CSRF attacks.

MongoDB is everywhere: startups, enterprises, internal tools, production APIs. That ubiquity is exactly what makes CVE‑2025‑14847, commonly…