There was a time when securing an application meant securing a screen. You worried about login pages, form validation, and maybe a firewall…

I never imagined that a simple click could wipe out everything I had worked for — my entire $450,000 crypto portfolio vanished in minutes…

PDF generators are widely used in modern web applications to automatically create documents such as invoices, receipts, tickets, reports…

As usual, even though I hate it, it’s been a long time since my last post. In the same vein, I’m not here to “reinvent” the wheel. I’m just…

Security disasters rarely arrive with sirens.

Disclaimer:  This research was conducted responsibly, in good faith, and coordinated through CERT/CC. No sensitive details, exploit…

For a long time, I thought XSS needed input fields or query parameters.

Mandiant Attack Cycle bir siber saldırganın hedef sisteme ilk girişi yapmasından başlayarak hedef üzerinde kalıcı hale gelmesine ve…

What started as quiet reports in November has now turned into a Ni8mare, as n8n rushes out security updates with potentially severe…

Turns out this machine is a DNS server — it’s time to get your shovels out!

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

By reading this article, you may change your perspective on cybersecurity. Its true impact becomes clear once you understand what…

My First Critical Bounty: How I Went From robots.txt to Full Admin Access. Six months ago, I decided to learn cybersecurity. I chose bug hunting. I spent nights reading, doing labs, and hitting dead …

This blog is about CTF challenges on C0m-0lho that are publicly available. Honestly, they don’t create their own CTFs; they have mostly…

Hay vulnerabilidades que nos incomodan más que otras. No solo por su impacto técnico, sino porque desnudan una fragilidad estructural que…

A step-by-step Android pentesting write-up covering implicit intents, intent hijacking, and secure mitigation mapped to OWASP MSTG.

Difficulty: Medium Room: Poster Focus: PostgreSQL Misconfiguration, Credential Reuse, RCE, Privilege Escalation

One day, a company believed its computer systems were very safe. They had spent a lot of money on security, so everyone felt relaxed.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread