Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

How a single CRLF \r\n sequence poisoned shared caches and caused cross user outages in a major enterprise.

Bu labda, uygulamanın kullanıcının yetki seviyesini belirlerken istemciden gelen girdilere güvenmesi nedeniyle ortaya çıkan bir mantık…

A hallway light flickers on at 2:37 a.m., the beam cutting through the thin haze of a humid February night. The motion sensor mounted in…

Environment Setup

Room Name: Hydra
Level: Easy
Category: Hacking, Password Cracking

Hi everyone,  In this article I will explain what **SQL Injection** is why it is dangerous and the **different types of SQL Injection…

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Today, we have another challenge called Takeover.
 In this room, we’ll start solving the challenge step by step while learning new…

Task 1: Brief
Subdomain enumeration is the process of finding valid subdomains for a domain, but why do we do this? We do this to expand…

Read for free here

Race conditions are a type of security problem that happen when a website handles many requests at the same time without proper control.

Cyber Health Hospital: A hands-on attack-tree case study The discomforting reality of threat modeling.

Crystal Palace is a PIC framework that can be used to write, among other things, prepended DLL loaders. The philosophy of the project is to apply evasion tradecraft (also written as PIC), to a capability at link-time. For a DLL, it does this by hooking the…

When you examine requests that perform sensitive actions (such as changing an email or password), you’ll often find some form of CSRF…

Bueno, por aqui os dejo mi write-up de la maquina puzzle de Dockerlabs, de dificultad media

Malware analysis isn’t just about reading code it’s about solving a crime. My investigation began not with a file, but with a panic call…

Author of The Drone Wars OSINT Field Guide to Russian Drone Footage & Verification and How to Hack a Modern Dictatorship with AI: The…

Web applications are at the heart of almost every service we use today, from banking to social media. But with convenience comes risk. Week…