When I see a clean lastlog output, I do not feel relieved.

AI security interview questions are getting harder every year. And top companies are raising the bar. Google, Microsoft, Visa, and OpenAI…

Launching a mobile app feels exciting. You’ve spent months (maybe years) designing it, developing features, fixing bugs, and finally you’re…

In network security, not all threats emerge suddenly. Most attacks actually begin with one simple yet crucial activity: port scanning. This…

Most people think accounts are hacked by cracking passwords.

In previous articles, we’ve already covered what Server-Side Request Forgery (SSRF) is. In this post, we’ll look at how open redirects can…

We have already looked at Server-Side Request Forgery (SSRF) and found that exploitation usually relied on one key advantage: visibility…

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Free Link

WordPress Security Assessment & Penetration Testing Report

Hey there, back again with another post! 😄

Image XSS ATTACK on Exif.tools | Hacking exif.tools via image injection by CYBER KALKI #Livepoc (Rewriting Deleted article originally published in oct 2025) I uncovered and demonstrated a …

This issue came from an endpoint that looked completely harmless. It was a download API that fetched a URL on the server and returned the…

This is a description of the steps I took to solve the Infinity Learning lab: Function’s Backdoor Route [1]. It is classified as a hard…

Summary

ARP spoofing & Man In The Middle Attacks Execution & Detection

Security Onion is a powerful open-source platform for network security monitoring, intrusion detection, and log management, widely used by…

Exposing services directly to the internet still comes with significant risk, even today. To better understand real-world attack behavior…

Android Pentesting Series