Exploiting Parameter Driven Authorization Logic in Authenticated APIs This write up describes the discovery and exploitation of a server side authorization issue caused by trusting identity data …

1/2/20262 min read

Bu labda uygulama, kullanıcı girdilerini yeterince doğrulamıyor. Özellikle hesap kayıt (registration) sürecinde bulunan bir mantık hatası…

THM ADVENT of CYBER 2025 -SQ1

Work Smarter not harder.

OSI Model with layer-wise functions, protocols, and common cyber attacks explained from a security perspective.

IA da rede X permite manipulação de fotos reais com comandos simples

Note#:understanding CSRF (the basics)

In Week 3 and 4, I completed the OWASP API TOP 10 and Beyond Course on API Security University.

Hey there, back again with another post! 😄

Siber güvenlik dünyasına yeni adım atan biriyseniz, çok geçmeden bazı kavramlarla tekrar tekrar karşılaşmaya başlarsınız. PTES, OSSTMM…

Open challenge.eml file with Thunderbird

Target: Smol  Difficulty: Easy → Medium  Skills Demonstrated: Enumeration, WordPress exploitation, SSRF, command execution, reverse shell…

The above image is the exiftool.jpg file to test all the metadat into the imge so download it for test purpose.

CTF Platform: picoCTF

This lab contains a blind SQL injection vulnerability. The application uses a tracking cookie for analytics, and performs a SQL query…

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread