Task 1 — Introduction

https://app.hackthebox.com/machines/Reactor

Modules

Cybersecurity isn’t just about building stronger defenses. It’s about thinking like an attacker before a real attacker does.

A new security study reveals that nearly 64% of AI-powered iPhone apps expose API credentials or weak authentication, putting developers at…

Siber güvenlik dünyasında “en tehlikeli” zafiyetlerin başında gelen Remote Code Execution (RCE), bir saldırganın hedef sistem üzerinde…

This is a walkthrough of the portswigger lab: Blind SQL Injection With Conditional Errors.

A few weeks ago, I was testing a web application when I noticed something that looked interesting — a “.jpeg” file being loaded by the…

This is my writeup for Hidden in Plainsight, an Easy-rated Forensics challenge on PicoCTF.

🔍 Opening the Challenge

1. Introduction

Switch to QUERY http method Secure coding should always be the top priority for developers while building applications. Hence it was a welcome news when the HTTP QUERY Method was formally introduced …

Abstract

SSH is not merely a remote-login command. In the hands of a system administrator, developer, penetration tester, or ethical hacker, it…

Using an ESP32 Marauder Without a Screen: A Phone and Desktop Controller Over USB

Hello and welcome to my first write-up, I am d4nc00p3r and I am a new pentester learning by myself.

Introduction

Enumeration

During a security assessment of a web app, I discovered a critical authentication bypass that allowed account takeover of arbitrary users.

Hello everyone! My name is Arfat Khan, and I run a YouTube channel called Arfi Tutorials. I am a bug bounty hunter, penetration tester, and…

Quite interesting room that challenges your basic reconnaissance abilities. At first i tried simply do checkmate and got embarrassing…