Introduction

While exploring web challenges on HTB, I chose the Only-Hacks challenge. This challenge does not provide any source code files for…

I discovered a new weakness in the offer retrieval functionality that allows an attacker to access unauthorized offers. This issue is bypassing the previous fix, which was based on the vulnerability…

About a year ago, when the researcher started exploring HackerOne, they discovered one of the most impactful bugs ever. they received a…

Understanding the HTTP Permissions-Policy Header

세계적으로 유명한 가상자산 거래소 ByBit에서 2조원 규모의 이더리움 화폐를 탈취당했다는 내용입니다. 특히 블록체인 분석가에 의하면 북한이 연루되었을 수도 있다는 내용입니다.

https://overthewire.org/wargames/bandit/

In cybersecurity, the biggest threats are often the ones hiding in plain sight. While security teams are busy defending against ransomware…

It’s time to recognize the human behind the console.

In the past year, I undertook a formidable yet gratifying odyssey — a 100-day cybersecurity challenge. The objective was to immerse into the multifaceted realms of cybersecurity, unveiling its…

Understanding the Rise of Agentic RAG

For Derailed Malware Analysis:

ITelegram is a popular messaging app with over 600 million monthly active users. While it offers secure and private messaging…

I recently dove into the QRadar101 Blue Team Challenge on CyberDefenders, and it was an exhilarating journey into threat hunting using IBM…

Authentication and authorisation are critical components of secure applications. Authentication verifies a user’s identity, while…

Understand Windows Standard Input/Output/Error and its significance in penetration testing engagements.

February 23rd, 2025 | Writer: Madison Paige Doherty

Hello It’s me Shubham again , a CTF player and currently learning deep OSINT.

https://www.vulnhub.com/entry/hogwarts-dobby,597/

In today’s digital landscape, APIs are the lifeblood of modern applications — and with great power comes great responsibility. Securing…