This article expands on presentations delivered at BSides Bristol 2025, BSides Kent 2026, and BSides Birmingham 2026.

Finding IIS weaknesses using simple tests and file upload methods

Task 1: AWS & Other Events

i do nmap -A -p- -sV -sC ip

It’s incredibly easy to just memorize a bunch of SQLMap flags without actually understanding what they are doing to the database. I…

This bug I found on a B2B platform on the home page. This credentials leaked here are accessible to any user with the internet no login…

One late night while hunting on a public VDP program, I stumbled into one of those moments that instantly changes the way you look at a…

Box: Extplorer
Difficulty: Intermediate

Here is a situation that shows up in real audits more than it should. The information security policy is impeccably formatted, forty-plus…

Environment: Windows 10/11 + Docker Desktop + Burp Suite (Community/Pro)

How a curious experiment inspired by Wi-Fi SSIDs led me to discover a XSS vulnerability in one of Indonesia’s banking apps

🧠 Introduction

Bu yazımda Android uygulamalarında sıkça karşılaşılan bileşen ve IPC güvenlik zafiyetlerini ele alacağım. Bu zafiyetler; tek bir kullanıcı…

Welcome back, hackers! Today we are taking a look at Soulmate, a box that starts quietly and then turns into a clean chain of trust…

A beginner AWS Cloud CTF

THM Walkthrough

Hello my name is Houston Jones, and I will be your personal guide through the VulnHub “Earth”.

Understanding the two mindsets that power modern cybersecurity

Just a directory listing that should never have been public.

What is Supabase?

Explore the landscape of penetration testing frameworks.