Practical lessons from controlled rogue access point testing and how defenders should respond

Lab Link: Portswigger

How weak filename checks lead to arbitrary file reads in web applications.

“The man who chases two rabbits catches neither.”

This is the Writeup for December’s YesWeHack challenge. Challenge description says “A new API has been developed in Python. The developers…

Este es el Writeup para el reto de Diciembre de YesWeHack.

Phiên bản Hack Thế Giới Hải Tặc mang đến trải nghiệm chơi game hoàn toàn khác so với bản gốc, đặc biệt phù hợp với những người chơi muốn…

In cybersecurity, we spend a lot of time protecting systems from malicious inputs, broken authentication, and misconfigured servers. But…

When I attempted PJPT, I was still earlier in my security journey and didn’t have the same level of real-world exposure I have now.

You are probably reading this before buying the exam or in the middle of it desperately trying to grasp at any hint or clue. If it’s the…

Why testing password policies matters in advanced web application penetration testing User authentication is often the first line of defense in modern web applications. Weak password policies can …

What you can test, what is prohibited, and how AWS handles controlled DDoS simulations

In this walkthrough, we explore the Library machine, a boot2root challenge created for FIT and BSides Guatemala. This machine serves as a…

This write-up covers my experience and solutions from HackQuest Season 10, focusing on how I approached each challenge under time pressure.

In the digital shadows where code meets consequence, two figures emerge with remarkably similar skill sets but vastly different intentions…

How a Simple Email List Got Me My First Bug Bounty For a long time, bug bounty felt like this for me: Rejected. Duplicate. Out of scope. P5 — No impact. Again and again. I was submitting …

External penetration testing is often treated as a checkbox activity — run the test, receive a…

What’s up everyone and welcome back to another walk-through of an exciting BugForge.io daily challenge. This challenge is actually one of…

Với Ace Racer Mod APK, người chơi sẽ trải nghiệm tốc độ đỉnh cao mà không lo hạn chế tài nguyên. Tất cả xe đều mở khóa, nâng cấp nhanh…

By AKA SU | Cybersecurity Analyst & Tech Enthusiast