Relatório de Threat Intelligence | Análise Tática e Operacional

Most security breaches are not caused by nation-state zero-days. They are caused by things that should have been caught on day one. Here is…

When starting to learn about the server-side vulnerabilities , everyone must have listened the phrase “Authentication Vs Authorization”

Qu’est ce qu’Active Directory ?

If you are diving into vulnerability research or penetration testing, you quickly run into a hardware problem. Cloud labs can get…

Reconnaissance and Enumeration
Before touching the application, let’s understand what we are working with. In any penetration test, the…

Four web stacks, four CVEs: fingerprint MERN, Next.js, Django, and LAMP, then exploit each one.

Introduction

Most e-commerce applications implement restrictions like:

I Got Paid $400 to Type One Sentence Into a Chatbot. Here’s the Full Methodology Behind It.

Artificial Intelligence is rapidly transforming cybersecurity.

If you set a GRUB password and think your device is safe from physical exploitation, read this.

If you saw my last post, you would know port 53 is open and a service dnsmas 2.83 is running. After confirming this i move to Metasploit to…

Understanding SQL injection basics and how input flaws expose data

Vamos resolver este CTF? Neste write-up, vou mostrar minha linha de raciocínio para encontrar os ingredientes do Rick Sanchez.

Exploiting Weak Password Patterns Using Hydra, CeWL, CUPP, Hashcat, and Crunch

I was testing this application where the user’s can ask questions and the Super admins, Admins and other user’s can answer on a blog…

A practical walkthrough of finding hardcoded AES keys in JavaScript and decrypting protected API traffic outside the browser.

AS-REP Roasting is a technique that targets user accounts with the Do not require Kerberos preauthentication setting enabled, allowing an…