Se trata de una máquina de hacking web que he desarrollado para mi alumnado del curso de especialización de ciberseguridad.

In this article, I’ll share a real-world authentication issue I discovered while testing a login functionality.At first glance, the…

Hy aLL !! Mr_Curi0sity here !!

When hunting on a site I tend to just poke around, gauge the functionality and see logically what can be broken before I fuzz.

A practical, step-by-step methodology for bug bounty hunters and security researchers

In this WordPress penetration test activity, I used the KISS (“Keep it simple, stupid”) principle to compromise an administrative account…

Concierge Briefing

A walkthrough of TryHackMe’s “Room 404” — Very Easy, 30 points, Web category — Day 2 of the Hacker Holidays event at the Byte Lotus Hotel.

Giriş

Uncovering Hidden Content Through Web Enumeration and Reconnaissance

Solution:

In this challenge, a seemingly harmless web server exposed a configuration file containing SSH credentials. Those credentials granted…