Scenario:

Hey everyone…! 👋

Fake CAPTCHA campaign tied to ClickFix spreads infostealer targeting 25+ browsers, crypto wallets and gaming accounts via malicious PowerShell commands.

👨‍💻 About Me

I Broke Into a Database With (1=1) A one-day VAPT. A public API. No login required. The entire database on the table. Vulnerability Writeup · Private Engagement · CVSS 9.3 — Critical · CWE-89 · …

I have been learning bug bounty and web security for a few months and have been trying to work on public/private programs too. but since…

Author: Yakov Nissen, Chief Technology Officer, CallnFax

Fun fact: In 2026, your phone knows more about you than your best friend-and cybercriminals do too! 😬

An old man’s rant, new to the bug bounty hunting community

Description : Learn the basics of databases and SQL by writing simple queries to retrieve and manage data.

Before jumping into the tryhackme machines and starting this journey, i want to share my configs — what I did on tryhackme to make a stable…

Learn the basics of databases and SQL by writing simple queries to retrieve and manage data.

This room teaches the basics of the Client-Server model.

Pada kesempatan kali ini aku bakal nunjukin caraku nyelesaiin salah satu tantangan dari Hack The Box namanya adalah AoTR1. Dalam tantangan…

A practical walkthrough of building, exploiting, and fixing a critical JWT flaw.

Finding a vulnerability is only half the battle. The other half is proving it actually works outside of theory. That’s where a Proof of…

Step 1: Register

Imagine you have a message you want to protect. Not just “hide it a little,” but make it completely unreadable if someone gets their hands…

What Is Shortcut Hijacking?

Non-members are welcome to access the full story here.

Full penetration testing walkthrough — from reconnaissance to root shell in Kioptrix Level 1.1 (#2).