AI-assisted SQL Injection testing against a deliberately vulnerable e-commerce application.

A real case study in hyperlink injection and SSTI & two vulnerabilities hiding in plain sight

Responsible disclosure submitted. No mutations were executed. No systems were harmed. Finding classified as Informative. 50 CHF bonus…

Intigriti May 2026 XSS Challenge — full write-up

Mobile networks were never designed with modern cyber threats in mind.

Web Önbelleği Zehirlenmesi Pentesterlar neden önbellek öğrenmeli konusunun ardından biraz daha derine inip hem HTTP Kaçakçılığı hem de Önbellek konusunu birleştirip nasıl bir zafiyet …

A real case study in hyperlink injection and SSTI & two vulnerabilities hiding in plain sight

🚀 Introduction

Introduction

Before attacking an Active Directory environment, proper enumeration is critical. A rushed approach often leads to missed attack paths…

The Natas wargame series from OverTheWire is helpful in understanding web application security vulnerabilities. This is a beginner-friendly…

If you’ve ever studied digital forensics or prepared for a CTF, you’ve probably stared down a generic, sterile .raw memory dump or an…

前言

Bu yazıda CAPenX Mock Exam kapsamında karşılaştığım “Domain — IP Converter” uygulamasındaki bir OS Command Injection zafiyetini nasıl…

TryHackMeLearn web app pentesting by chaining vulnerabilities from recon to full server compromise.

When I started learning cybersecurity, one of the first things I heard was that learning Linux is very important. At first, Linux looked…

Dutch authorities arrested two suspects after dismantling a bulletproof hosting network linked to cybercrime, disinfo, and Russian sanctions evasion.

In this article, I’ll share a real-world authentication issue I discovered while testing a login functionality.At first glance, the…

Bandit Solutions by Disaster.exe