A step-by-step walkthrough of CVE-2003–0201 on Kioptrix: Level 1

Part 2 of the Windows Privilege Escalation series

Hello Everyone,

The hardest part of building a Burp extension used to be the code — now it’s just coming up with the idea.

When hunting on a site I tend to just poke around, gauge the functionality and see logically what can be broken before I fuzz.

A few weeks ago, while interacting with the Bihar State Education Finance Corporation (BSEFCL) portal, I came across something that seemed…

The server is still making requests. You just have to find a different way to know that. Part 3 of the SSRF series.

I once paid top dollar for a bug that didn’t have a CVSS score at all.

Stuck on a Reverse Shell? It Has Your Back

Yes, There are Still Servers That Use It

The Missing Configuration File

Hello, everyone. I hope you are well.

In the fast-paced world of Information Security, it is incredibly easy to get caught up in the latest zero-day exploits, flashing dashboard…

I uncovered the backend months ago. Other projects kept me from publishing. But the servers never went down.

Severity

A penetration test delivers a report. The client implements fixes. Then they ask you the question every client asks: “Are we actually…

First off, as someone who has been doing ethical hacking/red teaming for a bit now professionally, it would seem odd that I was doing a lab…