Subdomain Takeover is one of the most electrifying vulnerabilities in the bug bounty realm. The thrill of uncovering a forgotten or…

Hello, my name is XABIT, and I am an ethical hacker and cybersecurity researcher. Today, we are going to discuss a Denial-of-Service (DoS)…

Podcast “THE DIVERSITY CHANGER!” Episode 24

With Operation AI Comply, Federal Trade Commission (FTC) agency announces law enforcement actions against operations that use AI hype or…

DNS is an old protocol that seems very simple at the surface. It was deployed tens of years ago and some DNS servers worldwide are almost…

1. Introdução:

Oh, yes, TikTok. The short-form video platform that has captivated the youth, baffled the elderly, and sent lawmakers into a frenzied panic…

What are domain controllers in Active Directory.

Safety is a fundamental human need, and in today’s world, we rely on various methods to ensure it. From advanced security technologies to…

A few org changes later, and my team and I landed in DefSec. At first, I just rolled with it, nodding along in meetings like I had it all…

February 2025 | By Mateo Flores

Threat hunting is the proactive search for cyber threats that may have evaded existing security defences. Unlike reactive security…

Step 1: Identifying the XSS in Drag-Drop Functionality

A long redirection response refers to an HTTP redirection (status codes in the 3xx range) that includes a substantial message body…

In this post, I’ll show you how to use jwt_tool to analyze and exploit JWT vulnerabilities in crAPI, an intentionally vulnerable API.

Cybersecurity threats constantly evolve, and organizations must adopt robust security measures to protect their systems. One of the most…

Introduction

Malware (Malicious Software).

12 feb 2025

Email remains one of the most common communication channels for businesses, but it is also a primary target for cybercriminals. Phishing…