A mobile application penetration testing story about how a document management middleware turned a harmless upload into a window into the…

A Minute-by-Minute Journey Through a Modern Cyberattack

Background

Hii hunters Rs is here with one more informative & knowledgeable Article. I hope you find this helpful.

A malicious Codex UI npm package with 27,000 weekly downloads was caught exfiltrating OpenAI refresh tokens, exposing developers to account takeover risks.

A Dubai Real Estate Firm Publicly Published Its Own Security Audit — And Didn’t Fix a Single Vulnerability

While testing a public registration flow on a bug bounty target, I wasn’t looking for privilege escalation.

Disclosure: This article was created with the help of AI and reviewed by the Cyberraxha team.

VLAN konusunu öğrenirken bir noktada şöyle düşünmüştüm: madem her VLAN ayrı bir broadcast domain, madem birbirinden izole, o zaman bir…

A walkthrough of a complete VAPT engagement in a controlled lab environment

Task 1: Introduction

Non-members are welcome to access the full story here.

Ok, first off, this story alone is nuts. I don’t condone malicious actions, but I did want to cover the story. Second, THANK GOD FOR THE…

A technical analysis of a security vulnerability discovered through bug bounty — and thoughts on how AI should be used in this process.

UFW is one of the first tools many of us enable on a fresh Linux server.

Lab from Portswigger.

Notes from a pentester taking Tyler Ramsbey’s AWS course.

A complete walkthrough of the GoldenEye TryHackMe room covering POP3 enumeration, credential harvesting, Moodle exploitation, reverse shell access, and Linux privilege escalation.

I Chased This Goal for Two Years. Here's What Happened.