PDF generators are widely used in modern web applications to automatically create documents such as invoices, receipts, tickets, reports…

As usual, even though I hate it, it’s been a long time since my last post. In the same vein, I’m not here to “reinvent” the wheel. I’m just…

Security disasters rarely arrive with sirens.

Disclaimer:  This research was conducted responsibly, in good faith, and coordinated through CERT/CC. No sensitive details, exploit…

For a long time, I thought XSS needed input fields or query parameters.

Mandiant Attack Cycle bir siber saldırganın hedef sisteme ilk girişi yapmasından başlayarak hedef üzerinde kalıcı hale gelmesine ve…

What started as quiet reports in November has now turned into a Ni8mare, as n8n rushes out security updates with potentially severe…

Turns out this machine is a DNS server — it’s time to get your shovels out!

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

By reading this article, you may change your perspective on cybersecurity. Its true impact becomes clear once you understand what…

My First Critical Bounty: How I Went From robots.txt to Full Admin Access. Six months ago, I decided to learn cybersecurity. I chose bug hunting. I spent nights reading, doing labs, and hitting dead …

A step-by-step Android pentesting write-up covering implicit intents, intent hijacking, and secure mitigation mapped to OWASP MSTG.

Difficulty: Medium Room: Poster Focus: PostgreSQL Misconfiguration, Credential Reuse, RCE, Privilege Escalation

One day, a company believed its computer systems were very safe. They had spent a lot of money on security, so everyone felt relaxed.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Listen up. Sit down and grab a coffee, or whatever it is you kids drink to stay awake these days. I want to talk to you about something I…

The title is subject to change- I will be releasing a self written biography covering my journey through life as a former cyber criminal.