Giriş

Introduction

The new xss0r V6 version is now officially available.

When an input field (like an email box) isn’t strictly validated, it opens the door for several types of attacks. It’s not just about messy…

https://portswigger.net/web-security/sql-injection/union-attacks/lab-determine-number-of-columns

Hello, I’d like to share a recent experience with the community. If you have followed my blogs on penetration testing and privilege…

The Experiment

HackableII: A Purple Team Breakdown — From Anonymous FTP to Root, and Everything Security Onion Caught Along the Way Most CTF write-ups are just lists of commands. This one is different. I run a …

Paul and Max use a rather unconventional way to chat. They do not seem to know that eavesdropping is possible though…

Table of Contents

A Cloud Engineer’s honest account of diving into the world of API security

Most people use apps every single day without thinking about what is happening underneath. You tap a button, data moves, something shows up…

Some vulnerabilities get discovered, patched, and forgotten. SQL injection was discovered in 1998 and has been on every major security…

FBI warns gamers after malware hidden in several Steam games stole browser data and drained cryptocurrency wallets between May 2024 and January 2026.

While testing an e-commerce website as part of a bug bounty program, I came across an interesting business logic issue related to…

This Write-Up is the final task of the cyberdefender bootcamp, where we are introduced to a tool called Wazuh. Here, we will learn the…

Enumeration

Enumeration

CRYPTOGRAPHY BASICS-

Let’s get started.