A hands-on journey through AWS, Azure, and GCP red teaming — SSRF, RCE, IAM privilege mapping, and cloud metadata abuse.

Task 1 — Introduction

Task 1 — Introduction

TL;DR

SSRF (Server-Side Request Forgery) makes your own server send requests you never intended, all the way into your internal network. A…

Attackers are compromising websites at scale and installing hidden tools on servers to maintain remote control. The campaign has hit numerous small and medium-sized organizations in Australia. How…

Malicious firmware can seize control of a device before Linux starts. It can remain nearly invisible to security software running at the OS level. Researchers at Binarly discovered six vulnerabili…

Hi Hackers
For confidentiality reasons, I’ll refer to the target simply as Target.
While testing Target’s cloud database platform, I found…

The MCP Bug Bounty Field Guide · Part 1 of 5 — what the protocol is, and why it just created the most under-hunted surface of 2026.

Description : Can you breach the server?

A set of vulnerabilities in Kia vehicles that allowed remote control over key function using only a license plate discovered by Researcher…

A DigitalMint negotiator fed five clients’ private numbers to the BlackCat ransomware gang, and those five paid more than $75 million. The…

Seeing news reports about scammers stealing nearly 1 trillion VND from innocent people by impersonating online public services hits hard…

I completed my first Jr penetration Tester room which was guided pentest. It was the introduction of how to use things by combinig what i…

Challenge Overview

Challenge: netanix/wherectf:latest

Di dunia yang semakin terhubung, kemampuan memahami cara kerja sebuah sistem dapat menjadi alat untuk melindungi maupun menyalahgunakan…

I successfully identified and exploited a blind OS command injection vulnerability in a controlled lab environment.

Introduction