Introduction

بسم الله الرحمن الرحيم

Explore unsafe comsumption of API´s, practicing Node Deserialization Attack. Challenge showcasing a web app and simple privilege…

I wrote this argumentative essay for Dr. Ryan Peters’ ENGL 294W class, which is about writing in and with new media.

Follow us on Bluesky, Twitter (X) and Facebook at @Hackread

Exploiting SSRF in Analytics Reports to Gain AWS Access

I found an IDOR vulnerability in an API that allowed me to access sensitive user details without proper authorization.

Introduction

Explorando Relações Ocultas nos Dados

Welcome to this new Medium post! Today, we will talk about thread hijacking, a technique used to execute functions inside another process…

Becoming a bug bounty hunter is an exciting journey that blends technical skills, creativity, and persistence. It’s a path where you evolve from understanding the basics of how the internet works to…

So, nearly a month ago I took my first crack at a certification exam, the AZ-900 (Microsoft Azure Fundamentals). I had planned to take the exam for a few months while I had already been studying…

Seorang Penetration Tester (pentester) adalah seorang profesional Keamanan siber yang bertugas menguji keamanan sistem, jaringan, dan…

1. Introduction

The Oil & Gas industry operates in an environment where every decision impacts costs, safety, and operational efficiency. Having worked on…

Introduction

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Learn about the Better Auth vulnerability that allows attackers to bypass security measures and take over user accounts.

All solutions + Summary for every Cheapter + Review

+ solutions for CSRF section in Nahams Secs Bug Bounty course.

The steps that I took to complete this box. Follow along!