Understanding RDP Session Hijacking: Risks, Detection, and Defense

By a Breath Hacker, Lurker of Intentional Streets

In web application security testing, testing focuses not only on authentication or encryption, but also on how the application manages user…

As AI systems begin interacting directly with enterprise tools through MCP, traditional gateway-based security models may not be enough…

Reflected, Stored, and DOM-based…

CTF solve report: Stored XSS by chaining unsanitized markdown rendering, preview script re-injection, and JSONP callback reflection

Hi everyone! Hope you’re all doing well.

Staring From Scratch — Bug Bounty Hi everyone, I know it has been more than one year since I published my last Medium article. Many of you appreciated my work, engaged with my posts, subscribed to …

It was one of those cold Ramadan nights. The kind where everyone else is asleep, the house is quiet, and the only light in the room is the…

1. The High Cost of Hallucinations

AI is starting to discover real security vulnerabilities faster than humans. Here’s what this means for bug bounty hunters.

The SPARTA framework continues to evolve with some added features and resource materials as well as some general bug fixes and aesthetic…

What happens when a background script blindly trusts a simple text file? In this walkthrough of the “Cage” machine, we’ll turn a basic…

The Rise of Autonomous AI Hackers in Modern Application Security

TASK 1

By Uppula Abhiram | Mobile Security Researcher

Active Directory (AD) adalah target yang sangat menarik dalam pengujian penetrasi karena kontrol aksesnya yang terpusat. Dalam artikel ini…

Room: Attacktive Directory

Background

A look at concurrency, retries, and defensive takeaways from a Python tool built to evaluate simple PIN-based authentication in controlled…