Triage teams close it as Low. The attacker reopens it as Critical. Here’s the gap.

The $8 Device that can Steal Passwords, Bypass firewalls and Compromise any Computer How it works and How to Defend

Hello world, this write-up covers an interesting IDOR vulnerability I discovered during a web application security assessment. What made…

A beginner's walkthrough of finding a blind stored XSS bug on a bug bounty program, proving impact against triage, and earning a second payout after the fix.

Every penetration tester and bug bounty hunter eventually runs into the same problem.

Unsafe YAML Deserialization & Process-Based Credential Leakage

Difficulty: Easy Category: AI/LLM security

Even the jukebox at this beach bar takes requests, apparently any kind of request. Turns out that includes requests it really, really…

Introduction

A code-first hunt through Mozilla’s open-source editorial backend where an existing SSRF guard was wired to exactly one endpoint, and the…

Hello Security People ! Today I finished a module from the CPTS certificate called SQL Injection Fundamentals and it has a skills…

Complete Cheat Sheet for Bug Bounty & Pentesting

(“Every Android App Has a Blueprint… Learn to Read It”)

Hey everyone! Nitin here 👋

Description : She knows your name, your room, your coffee order, none of which you told her. Word your next question carefully and she’ll…

How It Started

This one took me to a different level.

Room link: https://tryhackme.com/room/hh-beachbar-d849f7f7

I had only started to figure out this challenge when I realised it is deserving of a write-up, so yeah, hi i’m back.

THM Security Services has been engaged for a Threat Hunting activity for Helios Software Group.