Cross-Site Request Forgery (CSRF) is a common web application vulnerability that allows an attacker to trick a victim into performing…

Exploitation, Prevention, and Practice Labs for Directory Traversal Vulnerabilities

🚦 Understanding Rate Limiting and How It Affects Bug Bounty Testing

For years the advice was always the same. Use a strong password. Don’t reuse it. Change it every three months. Enable two-factor…

TL;DR — Risk summary

In this walkthrough, we will exploit the DC-1 machine.

A Complete Guide: Rooting, Burp Suite, Frida & SSL Unpinning on Redmi Note 9

In most hacking games, stealing currency is a “Press X to Profit” mechanic. In NODE: PROTOCOL, stealing Bitcoin is a multi-layered heist…

TryHackMe — GamingServer Kategori: Web, System | Zorluk: Kolay 1. Bilgi Toplama İlk olarak nmap ile hedefi tarıyorum: nmap -sC -sV [TARGET_IP] -sC: Default scriptleri çalıştırır -sV: Servis …

1. Makine Bilgisi

In this walkthrough, I will explain how I exploited the Insomnia machine.

Basic Pentesting 1 is a beginner-level penetration testing machine used to practice ethical hacking skills. The objective is to identify…

In this walkthrough, I will explain how I exploited the Insomnia machine.

In this walkthrough, I will explain how I exploited the Insomnia machine.

Target Machine: HF2019 Name: Mahammadyusuf A Sarkavas.

Challenge Overview

Most vulnerabilities exploit server bugs.

Step by step to capture flag inside bank Portal

CVE-2014–6271, better known as “Shellshock,” is one of the most notorious vulnerabilities ever discovered in the GNU Bash shell.

TL;DR: The End of Static Pinning
Abstract
Problem Statement
What SPKI is
Why certificate-bound pinning breaks
Why SPKI survives the new…

This writeup covers the entire path from initial reconnaissance to the final flag read. I am going to treat it like a real exploitation…