Intigriti May 2026 XSS Challenge — full write-up

Mobile networks were never designed with modern cyber threats in mind.

Web Önbelleği Zehirlenmesi Pentesterlar neden önbellek öğrenmeli konusunun ardından biraz daha derine inip hem HTTP Kaçakçılığı hem de Önbellek konusunu birleştirip nasıl bir zafiyet …

A real case study in hyperlink injection and SSTI & two vulnerabilities hiding in plain sight

🚀 Introduction

Introduction

Before attacking an Active Directory environment, proper enumeration is critical. A rushed approach often leads to missed attack paths…

The Natas wargame series from OverTheWire is helpful in understanding web application security vulnerabilities. This is a beginner-friendly…

If you’ve ever studied digital forensics or prepared for a CTF, you’ve probably stared down a generic, sterile .raw memory dump or an…

前言

Bu yazıda CAPenX Mock Exam kapsamında karşılaştığım “Domain — IP Converter” uygulamasındaki bir OS Command Injection zafiyetini nasıl…

TryHackMeLearn web app pentesting by chaining vulnerabilities from recon to full server compromise.

When I started learning cybersecurity, one of the first things I heard was that learning Linux is very important. At first, Linux looked…

Dutch authorities arrested two suspects after dismantling a bulletproof hosting network linked to cybercrime, disinfo, and Russian sanctions evasion.

In this article, I’ll share a real-world authentication issue I discovered while testing a login functionality.At first glance, the…

Bandit Solutions by Disaster.exe

Today, I burned most of my morning chasing what I thought was a juicy SSRF on a bug bounty target. Turns out? False positive. CDN caching…

Hello

The Supply Chain Scare That Has Every Hunter Changing Their Game. This Weekend was not quiet in the community. There’s a supply chain incident making the rounds — thousands of internal Github …