This post is a tutorial focused on explaining SQL Injection (SQLi) attacks using manual methods without relying on automated tools. The…

In the world of SecOps (Security Operations), the stakes are always high. One misstep can lead to catastrophic breaches, compromised…

이 글은 Red Teaming 실습을 목적으로 작성되었습니다. 본 글에서 다루는 내용과 기술은 정보 보안 학습과 연구를 위한 용도로만 사용되어야 하며, 이를 악의적인 목적으로 활용하는 경우 모든 법적 책임은 행위자 본인에게 있습니다.

SQL injection can create web shells, allowing attackers to remotely extract and exfiltrate sensitive data. Prevent this by using…

Jazz Age Mickey Mouse & Popeye are public domain + Secret notes with PrivacySafe Link

Let’s talk about something that’s sending shockwaves through the cybersecurity community right now — the new variant of the Banshee…

Creating a website can feel like a monumental achievement. You’ve poured your heart and soul into designing it, crafting the content, and establishing your brand online. But have you thought about…

Cross-Site Scripting (XSS) remains one of the most common and dangerous web application vulnerabilities. This post will delve into the…

The digital landscape is full of opportunities for content creators in 2025. Whether you are a vlogger, blogger, or podcaster, even…

In today’s 🌐 digital landscape, 🛡️ cybersecurity threats come in various forms, and one of the sneakiest among them is typosquatting ✏️…

Just like weapons makers design tools for police officers to help protect society, machine learning (ML) engineers create powerful systems…

Imagine having a Linux system in your pocket, ready to use whenever you need it. Whether you’re learning to hack, love programming, or want…

Lab Link: https://portswigger.net/web-security/csrf/lab-no-defenses

In the world of cybersecurity, two terms frequently emerge in discussions about safeguarding systems and data: authentication and…

In the ever-evolving landscape of cybersecurity, scanning tools play a pivotal role in identifying vulnerabilities, ensuring compliance…

The landscape of cybersecurity continues to evolve rapidly, and with it, the tactics, techniques, and procedures (TTPs) employed by Red…

Overview

sql injection occurs when accepting the user input to access the database without sanitization.

Follow us on Bluesky, Twitter (X) and Facebook at @Hackread

Automated Scanning and Enumeration of ADFS Services

During my exploration of Vercel’s platform, I discovered a reflected XSS vulnerability in the “clone project” functionality. This write-up…