⤷ Title: HTB Footprinting Lab — Easy
════════════════════════
𐀪 Author: Youssef Ezzat
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 14:55:15 GMT
════════════════════════
⌗ Tags: #cybersecurity #hackthebox #penetration_testing #ctf #ethical_hacking
════════════════════════
𐀪 Author: Youssef Ezzat
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 14:55:15 GMT
════════════════════════
⌗ Tags: #cybersecurity #hackthebox #penetration_testing #ctf #ethical_hacking
Medium
HTB Footprinting Lab — Easy
Hey everyone! Today I’m sharing how I solved the Footprinting Lab — Easy on Hack The Box. This lab is all about enumerating services and…
⤷ Title: Projects vs Certifications in Cybersecurity — What Actually Gets You Hired?
════════════════════════
𐀪 Author: Karanam Shrivasta
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 14:51:01 GMT
════════════════════════
⌗ Tags: #ethical_hacking #devsecops #cybersecurity
════════════════════════
𐀪 Author: Karanam Shrivasta
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 14:51:01 GMT
════════════════════════
⌗ Tags: #ethical_hacking #devsecops #cybersecurity
Medium
Projects vs Certifications in Cybersecurity — What Actually Gets You Hired?
By Karanam Shrivasta 15-Year-Old Cybersecurity Enthusiast
⤷ Title: System Enumeration & Network Reconnaissance: Understanding the Attack Surface
════════════════════════
𐀪 Author: ZeroDay-Security-Services
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 13:17:00 GMT
════════════════════════
⌗ Tags: #reconnaissance #cybersecurity #information_gathering #ethical_hacking #information_security
════════════════════════
𐀪 Author: ZeroDay-Security-Services
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 13:17:00 GMT
════════════════════════
⌗ Tags: #reconnaissance #cybersecurity #information_gathering #ethical_hacking #information_security
Medium
System Enumeration & Network Reconnaissance: Understanding the Attack Surface
When approaching a Windows system during an engagement, the first objective is simple: understand the environment before interacting with…
⤷ Title: Web Gauntlet 2 — picoCTF
════════════════════════
𐀪 Author: Nway Nway Zay Ya
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 13:35:01 GMT
════════════════════════
⌗ Tags: #ctf_writeup #ctf #sql #sql_injection #picoctf
════════════════════════
𐀪 Author: Nway Nway Zay Ya
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 13:35:01 GMT
════════════════════════
⌗ Tags: #ctf_writeup #ctf #sql #sql_injection #picoctf
Medium
Web Gauntlet 2 — picoCTF
The “Web Gauntlet 2” challenge from picoCTF builds on the original Web Gauntlet, but introduces a small twist that makes it more…
⤷ Title: No Rules, No Locks — Firebase Misconfiguration and the Borrowers It Left Behind
════════════════════════
𐀪 Author: Alvin Ferdiansyah
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 14:00:41 GMT
════════════════════════
⌗ Tags: #misconfiguration #bug_bounty_writeup #firebase #vulnerability #data_privacy
════════════════════════
𐀪 Author: Alvin Ferdiansyah
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 14:00:41 GMT
════════════════════════
⌗ Tags: #misconfiguration #bug_bounty_writeup #firebase #vulnerability #data_privacy
Medium
No Rules, No Locks — Firebase Misconfiguration and the Borrowers It Left Behind
Firebase security rules are opt-in. The default, for every new database & storage bucket, is wide open. This is the writeup of a…
⤷ Title: Unauthenticated API Field Bypass — Leaking Internal Scores, Enterprise Data & User PII.
════════════════════════
𐀪 Author: Krithick
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 16:43:10 GMT
════════════════════════
⌗ Tags: #bug_bounty #ethical_hacking #cybersecurity #web_application_security #api_security
════════════════════════
𐀪 Author: Krithick
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 16:43:10 GMT
════════════════════════
⌗ Tags: #bug_bounty #ethical_hacking #cybersecurity #web_application_security #api_security
Medium
Unauthenticated API Field Bypass — Leaking Internal Scores, Enterprise Data & User PII.
I Asked a Public API a Question It Wasn’t Supposed to Answer — And It Told Me Everything
⤷ Title: How I Locked a Victim Out of Their Own Account — Before They Even Signed Up
════════════════════════
𐀪 Author: BugWraith (Lokesh)
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 16:30:42 GMT
════════════════════════
⌗ Tags: #critical #cybersecurity #bug_bounty #account_lockout #vulnerability
════════════════════════
𐀪 Author: BugWraith (Lokesh)
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 16:30:42 GMT
════════════════════════
⌗ Tags: #critical #cybersecurity #bug_bounty #account_lockout #vulnerability
Medium
How I Locked a Victim Out of Their Own Account — Before They Even Signed Up
There’s a category of bugs that doesn’t get enough attention. Not the ones that hand the attacker a session. Not the ones that leak data…
⤷ Title: “' OR 1=1 --” Is Blocked? Good. You’re Finally Ready to Find Real SQL Injection
════════════════════════
𐀪 Author: Pradeeptadi
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 15:47:06 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity
════════════════════════
𐀪 Author: Pradeeptadi
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 15:47:06 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity
Medium
🚫 “' OR 1=1 --” Is Blocked? Good. You’re Finally Ready to Find Real SQL Injection
🚫 “' OR 1=1 --” Is Blocked? Good. You’re Finally Ready to Find Real SQL Injection Every beginner tries this: ' OR 1=1 -- And gets blocked. 👉 WAF stops it 👉 No error 👉 No response So …
⤷ Title: How a 404 Page Led Me to an Unauthenticated AI Chatbot Leaking an Entire ERP Knowledge Base
════════════════════════
𐀪 Author: Rohaangupta
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 15:25:18 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #hacking #cybersecurity #bug_bounty #prompt_injection_attack
════════════════════════
𐀪 Author: Rohaangupta
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 15:25:18 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #hacking #cybersecurity #bug_bounty #prompt_injection_attack
Medium
How a 404 Page Led Me to an Unauthenticated AI Chatbot Leaking an Entire ERP Knowledge Base
The Boring Beginning
⤷ Title: How a Small Validation Flaw Led to a 0-Click Account Takeover
════════════════════════
𐀪 Author: ohmyleg
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 15:07:49 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty
════════════════════════
𐀪 Author: ohmyleg
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 15:07:49 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty
Medium
How a Small Validation Flaw Led to a 0-Click Account Takeover
Bug bounty hunting, for me, is mostly about understanding how applications handle authentication. Login, registration, password reset…
⤷ Title: Penetration Testing on OCI: What Oracle Actually Allows
════════════════════════
𐀪 Author: Tokishi
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 16:44:17 GMT
════════════════════════
⌗ Tags: #oracle #cloud_security #penetration_testing #oracle_cloud #cybersecurity
════════════════════════
𐀪 Author: Tokishi
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 16:44:17 GMT
════════════════════════
⌗ Tags: #oracle #cloud_security #penetration_testing #oracle_cloud #cybersecurity
Medium
Penetration Testing on OCI: What Oracle Actually Allows
A practitioner’s guide to running a compliant security test on Oracle Cloud Infrastructure
⤷ Title: Active Directory Lab Setup for Penetration Testing Using PowerShell
════════════════════════
𐀪 Author: Basithmohammedali
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 15:25:37 GMT
════════════════════════
⌗ Tags: #network_security #windows_server #cybersecurity #active_directory #penetration_testing
════════════════════════
𐀪 Author: Basithmohammedali
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 15:25:37 GMT
════════════════════════
⌗ Tags: #network_security #windows_server #cybersecurity #active_directory #penetration_testing
Medium
Active Directory Lab Setup for Penetration Testing Using PowerShell
This article demonstrates the end-to-end process of building an Active Directory environment from scratch and performing structured…
⤷ Title: Hardware Hacking 101 :: How I Hacked a Tenda Router from the Inside Out
════════════════════════
𐀪 Author: Abinivesh
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 15:21:55 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #iot_security #reverse_engineering #hardware_hacking
════════════════════════
𐀪 Author: Abinivesh
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 15:21:55 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #iot_security #reverse_engineering #hardware_hacking
Medium
Hardware Hacking 101 :: How I Hacked a Tenda Router from the Inside Out
A Hardware-to-Network Security Audit of the Tenda N300
⤷ Title: TryHackMe — MD2PDF — Writeup
════════════════════════
𐀪 Author: Szilidam
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 15:15:41 GMT
════════════════════════
⌗ Tags: #web_applications #markdown #penetration_testing #tryhackme_writeup
════════════════════════
𐀪 Author: Szilidam
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 15:15:41 GMT
════════════════════════
⌗ Tags: #web_applications #markdown #penetration_testing #tryhackme_writeup
Medium
TryHackMe — MD2PDF — Writeup
MD2PDF is a “5 minute hack” challenge at TryHackMe. This means, that we only need to solve one or two riddles to complete the room, and it…
⤷ Title: ContAInment | TryHackMe
════════════════════════
𐀪 Author: Binish Alamgir
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 16:20:13 GMT
════════════════════════
⌗ Tags: #cybersecurity #technology #tryhackme_walkthrough #ai_prompts #tryhackme
════════════════════════
𐀪 Author: Binish Alamgir
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 16:20:13 GMT
════════════════════════
⌗ Tags: #cybersecurity #technology #tryhackme_walkthrough #ai_prompts #tryhackme
Medium
ContAInment | TryHackMe
Task 1 Challenge:
⤷ Title: Sensitive Information Disclosure | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 15:50:53 GMT
════════════════════════
⌗ Tags: #ai #owasp_llm_top_10 #tryhackme #cybersecurity
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 15:50:53 GMT
════════════════════════
⌗ Tags: #ai #owasp_llm_top_10 #tryhackme #cybersecurity
Medium
Sensitive Information Disclosure | TryHackMe
Explore how AI embeddings, retrieval, and weak access controls expose sensitive private data.
⤷ Title: HackTheBox — TwoMillion: A Complete Walkthrough
════════════════════════
𐀪 Author: Yogeshwar Peela
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 16:46:05 GMT
════════════════════════
⌗ Tags: #linux #cve_2023_038 #hackthebox #cybersecurity #ethical_hacking
════════════════════════
𐀪 Author: Yogeshwar Peela
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 16:46:05 GMT
════════════════════════
⌗ Tags: #linux #cve_2023_038 #hackthebox #cybersecurity #ethical_hacking
Medium
HackTheBox — TwoMillion: A Complete Walkthrough
Difficulty: Easy | OS: Linux | Tags: Web, API Abuse, Command Injection, Kernel Exploit
⤷ Title: Kioptrix Level 1
════════════════════════
𐀪 Author: Heathentwitch
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 15:42:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #pentesting #ethical_hacking
════════════════════════
𐀪 Author: Heathentwitch
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 15:42:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #pentesting #ethical_hacking
Medium
Kioptrix Level 1
This is my walkthru for gaining root on the Kioptrix Level 1 machine.
⤷ Title: Critical Zero-Click Account Takeover via Archived / Cached Password Reset Links
════════════════════════
𐀪 Author: Mustafa Adam Gamaraldin Abdalla
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 17:00:49 GMT
════════════════════════
⌗ Tags: #ato #bug_bounty_tips #account_takeover #bugbounty_writeup
════════════════════════
𐀪 Author: Mustafa Adam Gamaraldin Abdalla
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 17:00:49 GMT
════════════════════════
⌗ Tags: #ato #bug_bounty_tips #account_takeover #bugbounty_writeup
Medium
Critical Zero-Click Account Takeover via Archived / Cached Password Reset Links
بسم الله الرحمن الرحيم
⤷ Title: Strengthening AI Security: The Rise of Bug Bounty Programs for Advanced Models
════════════════════════
𐀪 Author: Jas
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 18:05:51 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #threat_intelligence #bug_bounty #ai_security
════════════════════════
𐀪 Author: Jas
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 18:05:51 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #threat_intelligence #bug_bounty #ai_security
Medium
Strengthening AI Security: The Rise of Bug Bounty Programs for Advanced Models
As artificial intelligence continues to evolve, so does the need to secure it. A recent initiative around GPT 5.5 Bio highlights how bug…
⤷ Title: Smag Grotto[Try Hack Me] machine Walkthrough :
════════════════════════
𐀪 Author: Amrou bekhedda
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 17:45:33 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #ctf #bug_bounty #infosec
════════════════════════
𐀪 Author: Amrou bekhedda
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 17:45:33 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #ctf #bug_bounty #infosec
Medium
Smag Grotto[Try Hack Me] machine Walkthrough :
بِسْمِ اللَّـهِ الرَّحْمَـٰنِ الرَّحِيمِ