⤷ Title: pentest-ai: The Open Source Pentest Tool That Proves Every Finding Before It Reports It
════════════════════════
𐀪 Author: Dr. Fadi Shaar
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 18:23:59 GMT
════════════════════════
⌗ Tags: #ai_security #mcp_security #application_security #ai #penetration_testing
════════════════════════
𐀪 Author: Dr. Fadi Shaar
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 18:23:59 GMT
════════════════════════
⌗ Tags: #ai_security #mcp_security #application_security #ai #penetration_testing
Medium
pentest-ai: The Open Source Pentest Tool That Proves Every Finding Before It Reports It
pentest-ai: The Open Source Pentest Tool That Proves Every Finding Before It Reports It Security scanning tools have a trust problem. Not the tools themselves, but the relationship between security …
⤷ Title: Accessing Private GraphQL Posts — Lab Walkthrough — Portswigger
════════════════════════
𐀪 Author: Cybernerddd
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 19:48:44 GMT
════════════════════════
⌗ Tags: #cybernerddd #cybersecurity #graphql #hacking #api_testing
════════════════════════
𐀪 Author: Cybernerddd
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 19:48:44 GMT
════════════════════════
⌗ Tags: #cybernerddd #cybersecurity #graphql #hacking #api_testing
Medium
Accessing Private GraphQL Posts — Lab Walkthrough — Portswigger
In this lab from PortSwigger’s Web Security Academy, the goal was simple: find the hidden private blog post and extract its secret…
⤷ Title: Active Directory Attacks — AdminSDHolder Abuse
════════════════════════
𐀪 Author: Osec
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 18:03:16 GMT
════════════════════════
⌗ Tags: #red_team #ctf #cybersecurity #penetration_testing #windows
════════════════════════
𐀪 Author: Osec
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 18:03:16 GMT
════════════════════════
⌗ Tags: #red_team #ctf #cybersecurity #penetration_testing #windows
Medium
Active Directory Attacks — AdminSDHolder Abuse
AdminSDHolder is a protected Active Directory object located at CN=AdminSDHolder,CN=System,<domain>. Its security descriptor serves as the…
⤷ Title: TryHackMe — GLITCH Writeup
════════════════════════
𐀪 Author: Karam Chatra
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 19:10:30 GMT
════════════════════════
⌗ Tags: #linux #tryhackme #ctf
════════════════════════
𐀪 Author: Karam Chatra
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 19:10:30 GMT
════════════════════════
⌗ Tags: #linux #tryhackme #ctf
Medium
TryHackMe — GLITCH Writeup
“Challenge showcasing a web app and simple privilege escalation. Can you find the glitch?”
⤷ Title: 100 Days of Change: Day 2 — Mastering the Engine
════════════════════════
𐀪 Author: Mudassir.Sharif
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 18:24:11 GMT
════════════════════════
⌗ Tags: #tryhackme #cybersecurity
════════════════════════
𐀪 Author: Mudassir.Sharif
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 18:24:11 GMT
════════════════════════
⌗ Tags: #tryhackme #cybersecurity
Medium
100 Days of Change: Day 2 — Mastering the Engine
“Efficiency is doing things right; effectiveness is doing the right things.” — Peter Drucker
⤷ Title: Part 2 — JWT Beyond Authentication: Identity Propagation Patterns Every MuleSoft Architect Should…
════════════════════════
𐀪 Author: Kapil Lokrey
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 18:25:55 GMT
════════════════════════
⌗ Tags: #mulesoft #enterprise_architecture #oauth2 #api_security #jwt
════════════════════════
𐀪 Author: Kapil Lokrey
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 18:25:55 GMT
════════════════════════
⌗ Tags: #mulesoft #enterprise_architecture #oauth2 #api_security #jwt
Medium
Part 2 — JWT Beyond Authentication: Identity Propagation Patterns Every MuleSoft Architect Should…
A JWT shouldn’t just open the door to your API. It should help establish trust, preserve identity, and enable traceability across every…
⤷ Title: Fools guide to illict crypto miners via Langflow RCE exploit
════════════════════════
𐀪 Author: KN
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 18:25:48 GMT
════════════════════════
⌗ Tags: #langflow #rce_vulnerability #cybersecurity
════════════════════════
𐀪 Author: KN
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 18:25:48 GMT
════════════════════════
⌗ Tags: #langflow #rce_vulnerability #cybersecurity
Medium
Fools guide to illict crypto miners via Langflow RCE exploit
Threat:
⤷ Title: Windows Doesn’t Need to Kill Win32. It Needs an Opt-In WASM Sandbox.
════════════════════════
𐀪 Author: 1 Pouria Dev
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 21:11:52 GMT
════════════════════════
⌗ Tags: #sandbox #application_security #windows #wasm #microsoft
════════════════════════
𐀪 Author: 1 Pouria Dev
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 21:11:52 GMT
════════════════════════
⌗ Tags: #sandbox #application_security #windows #wasm #microsoft
⤷ Title: PEB Corruption: A Remote Process Crash Technique
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 21:13:29 GMT
════════════════════════
⌗ Tags: #pentesting #cybersecurity #hacking #malware #infosec
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 21:13:29 GMT
════════════════════════
⌗ Tags: #pentesting #cybersecurity #hacking #malware #infosec
Medium
PEB Corruption: A Remote Process Crash Technique
The Process Environment Block (PEB) is a critical runtime structure in Windows that contains essential process metadata: image base, heap…
⤷ Title: Metasploit Modules: The Brutal Blueprint Behind Real-World Attack Simulation
════════════════════════
𐀪 Author: Devansh Patel
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 19:57:11 GMT
════════════════════════
⌗ Tags: #linux #metasploitable #hacking #cybersecurity #metasploit
════════════════════════
𐀪 Author: Devansh Patel
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 19:57:11 GMT
════════════════════════
⌗ Tags: #linux #metasploitable #hacking #cybersecurity #metasploit
Medium
Metasploit Modules: The Brutal Blueprint Behind Real-World Attack Simulation
Metasploit is not just a tool for “running exploits.” That explanation is too small. Metasploit is a modular penetration testing framework…
⤷ Title: JavaScript Simple Demo: Exploring Asynchronous Engine Flows
════════════════════════
𐀪 Author: Jonathan Sanfer
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 21:01:06 GMT
════════════════════════
⌗ Tags: #programming #basic_software #cybersecurity #tryhackme #javascript
════════════════════════
𐀪 Author: Jonathan Sanfer
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 21:01:06 GMT
════════════════════════
⌗ Tags: #programming #basic_software #cybersecurity #tryhackme #javascript
Medium
JavaScript Simple Demo: Exploring Asynchronous Engine Flows
Introduction
⤷ Title: TheHackersLabs — Inj3ctCrew
════════════════════════
𐀪 Author: Lautarotarantini
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 21:01:42 GMT
════════════════════════
⌗ Tags: #ctf_writeup #ethical_hacking
════════════════════════
𐀪 Author: Lautarotarantini
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 21:01:42 GMT
════════════════════════
⌗ Tags: #ctf_writeup #ethical_hacking
Medium
TheHackersLabs — Inj3ctCrew
1- RESUMEN
⤷ Title: The 90% Discount on Claude Tokens Has a Small Catch: You May Be the Product
════════════════════════
𐀪 Author: ABV — Applied AI Reviews
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 20:32:35 GMT
════════════════════════
⌗ Tags: #claude_ai #api_security #cybersecurity #artificial_intelligence #data_privacy
════════════════════════
𐀪 Author: ABV — Applied AI Reviews
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 20:32:35 GMT
════════════════════════
⌗ Tags: #claude_ai #api_security #cybersecurity #artificial_intelligence #data_privacy
Medium
The 90% Discount on Claude Tokens Has a Small Catch: You May Be the Product
A cheap Claude proxy is not just a bargain API. It may be an account farm, a model swap, and a very efficient way to leak your prompts…
⤷ Title: Things Nobody Tells You When You Start Bug Bounty (I Learned the Hard Way)
════════════════════════
𐀪 Author: Raju Ranjan
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 23:25:56 GMT
════════════════════════
⌗ Tags: #hackerone #cybersecurity #bug_bounty_writeup #bug_bounty_tips #bug_bounty
════════════════════════
𐀪 Author: Raju Ranjan
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 23:25:56 GMT
════════════════════════
⌗ Tags: #hackerone #cybersecurity #bug_bounty_writeup #bug_bounty_tips #bug_bounty
Medium
Things Nobody Tells You When You Start Bug Bounty (I Learned the Hard Way)
I wasted three hours last month staring at this error:
⤷ Title: Account Takeover Attacks: Why Authentication Isn’t the Real Problem
════════════════════════
𐀪 Author: Sentinel Layer
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 23:31:00 GMT
════════════════════════
⌗ Tags: #authentication #account_takeover #application_security #cybersecurity #fraud_detection
════════════════════════
𐀪 Author: Sentinel Layer
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 23:31:00 GMT
════════════════════════
⌗ Tags: #authentication #account_takeover #application_security #cybersecurity #fraud_detection
Medium
Account Takeover Attacks: Why Authentication Isn’t the Real Problem
Research June 27, 2026 · 6 min read
⤷ Title: Why Do Hackers and Cybersecurity Professionals Hide Their Identity?
════════════════════════
𐀪 Author: SAM SALATINI
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 22:31:53 GMT
════════════════════════
⌗ Tags: #hacker #cybersecurity #cyberattack #ethical_hacking #cyber
════════════════════════
𐀪 Author: SAM SALATINI
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 22:31:53 GMT
════════════════════════
⌗ Tags: #hacker #cybersecurity #cyberattack #ethical_hacking #cyber
Medium
Why Do Hackers and Cybersecurity Professionals Hide Their Identity ?
why do hackers and cybersecurity prbeessionaly profesionals hide their identity ?
⤷ Title: Ten GeoVision Camera Vulnerabilities Hit GV-LPC License Plate Models
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 01 Jul 2026 01:45:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CVE_2026_57878 #CVE_2026_57879 #CVE_2026_57880 #CVE_2026_57881 #GeoVision #GV_LPC2011 #GV_LPC2211 #License Plate Camera
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 01 Jul 2026 01:45:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CVE_2026_57878 #CVE_2026_57879 #CVE_2026_57880 #CVE_2026_57881 #GeoVision #GV_LPC2011 #GV_LPC2211 #License Plate Camera
Daily CyberSecurity
Ten GeoVision Camera Vulnerabilities Hit GV-LPC License Plate Models
TL;DR GeoVision disclosed 10 flaws in its GV-LPC2011 and GV-LPC2211 license plate cameras. All affect firmware V1.12 and earlier. Every bug is unauthenticated and remote, and four score 9.8 with p…
⤷ Title: Fluentd Vulnerabilities Patched in v1.19.3, Including Critical RCE
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 01 Jul 2026 01:11:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_44024 #CVE_2026_44025 #CVE_2026_44160 #CVE_2026_44161 #Fluentd #Log Management #rce #ssrf
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 01 Jul 2026 01:11:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_44024 #CVE_2026_44025 #CVE_2026_44160 #CVE_2026_44161 #Fluentd #Log Management #rce #ssrf
Daily CyberSecurity
Fluentd Vulnerabilities Patched in v1.19.3, Including Critical RCE
TL;DR The Fluentd project patched four security flaws in version 1.19.3. The worst, CVE-2026-44024, scores 9.8 and enables remote code execution. The rest cover server-side request forgery, creden…
⤷ Title: ProFTPD ACL Bypass Flaw Exposes Files in Restricted Directories
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 01 Jul 2026 00:30:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #access control bypass #ACL Bypass #CVE_2026_35025 #FTP #ProFTPD #Vulnerability
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 01 Jul 2026 00:30:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #access control bypass #ACL Bypass #CVE_2026_35025 #FTP #ProFTPD #Vulnerability
Daily CyberSecurity
ProFTPD ACL Bypass Flaw Exposes Files in Restricted Directories
TL;DR A new ProFTPD ACL bypass, CVE-2026-35025, scores 8.6 on CVSS. It lets a logged-in FTP user reach files inside restricted directories. No patch exists yet, but a workaround does. Why It Matte…
⤷ Title: Plone Fixes Critical RCE Flaw and Two Denial-of-Service Bugs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 01 Jul 2026 00:01:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Classic portlet #CMS Security #CVE_2026_57149 #Plone #Plone RCE vulnerability #plone.app.portlets #ssrf #TALES injection
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 01 Jul 2026 00:01:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Classic portlet #CMS Security #CVE_2026_57149 #Plone #Plone RCE vulnerability #plone.app.portlets #ssrf #TALES injection
Daily CyberSecurity
Plone Fixes Critical RCE Flaw and Two Denial-of-Service Bugs
TL;DR Plone patched three critical flaws across two add-on packages. The worst is a Plone RCE vulnerability scoring 9.9 on CVSS. Two more bugs enable denial of service, SSRF, and stored XSS. Why I…
⤷ Title: Guía de Inyección de Comandos OS: Explotación, Bypass de WAF y PoC
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Wed, 01 Jul 2026 00:01:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #penetration_testing #technology #bug_bounty
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Wed, 01 Jul 2026 00:01:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #penetration_testing #technology #bug_bounty
Medium
Guía de Inyección de Comandos OS: Explotación, Bypass de WAF y PoC
Aprende técnicas avanzadas de inyección de comandos OS, evasión de WAF, escalación de impacto y cómo redactar informes de PoC.