A deep dive into modern phishing campaigns exploiting trusted infrastructure

1 — Introduction

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

In bug bounty hunting, encountering a 403 Forbidden error is not a dead end it’s a challenge. It means there is something hidden behind…

Exploiting Parameter Driven Authorization Logic in Authenticated APIs This write up describes the discovery and exploitation of a server side authorization issue caused by trusting identity data …

1/2/20262 min read

Bu labda uygulama, kullanıcı girdilerini yeterince doğrulamıyor. Özellikle hesap kayıt (registration) sürecinde bulunan bir mantık hatası…

THM ADVENT of CYBER 2025 -SQ1

Work Smarter not harder.

OSI Model with layer-wise functions, protocols, and common cyber attacks explained from a security perspective.

IA da rede X permite manipulação de fotos reais com comandos simples

Note#:understanding CSRF (the basics)

In Week 3 and 4, I completed the OWASP API TOP 10 and Beyond Course on API Security University.

Hey there, back again with another post! 😄

Siber güvenlik dünyasına yeni adım atan biriyseniz, çok geçmeden bazı kavramlarla tekrar tekrar karşılaşmaya başlarsınız. PTES, OSSTMM…

Open challenge.eml file with Thunderbird

Target: Smol  Difficulty: Easy → Medium  Skills Demonstrated: Enumeration, WordPress exploitation, SSRF, command execution, reverse shell…