Salam burda mən verilən İP adresi scan edib sistemə giriş yollarını axtarıb, sistemə girməyə çalışacam.

Many working professionals in India are interested in cybersecurity, but they often feel stuck at the starting point. You may be working in…

Everyone is automating recon in 2026. The tools are faster than ever. The pipelines run while hunters sleep. The results for most of them…

Portswigger lab DOM XSS in document.write sink using source location.search

When Anthropic announced Claude Mythos through Project Glasswing, most of the cybersecurity industry focused on one thing:

You know everything you’re supposed to do. You’ve read the articles, downloaded the apps, set up the 2FA. So why does your gut still tell…

In this article we are going to talk about MySQL User Defined Function privilege escalation in Linux and how to escalate the privileges…

Two models on Hugging Face looked ordinary — but the instant you loaded one, it opened a backdoor to your machine. The trick: a file…

Room Scenario

Odanın linki: https://tryhackme.com/room/easypeasyctf

SOC L1 Alert Triage Writeup / Walkthrough -tryhackme We will learn about SOC alerts and how we can build a systematic approach to effectively triage these alerts. Introduction An alert is a core …

# Why OSCP Certified No Longer Guarantees a Job (And What Actually Does) **The cert still matters. The market changed around it.** --- Three years ago, "OSCP" on a resume got you a callback within 48 …

I was finishing up the PNPT content and still working on PJPT too. However, I was able to combine both in one go (sorta). I wanted to get…

The story of how one X account lost monetization and what it teaches us about building online.

Achieving Remote Code Execution (RCE) by abusing apache .htaccess to upload a php payload.

It was one of those bug hunting nights where everything felt dead. I had been clicking around for hours, throwing requests into Burp Suite…

Introduction

Category: Web Application Security
Vulnerability Chain: SQL Injection → Database Access → Remote Code Execution
Severity: Critical
Status…

Introduction

Four candidates. Three threats. Make the production call.

DISCLAIMER: The techniques demonstrated in this write-up are intended solely for educational purposes. Please ensure that any testing is…