[Write-up] Blind SQL Injection with Out-of-Band Data Exfiltration.

Today’s write-up by Faique showcases a critical authentication flaw that led to an account takeover due to misconfigured 2FA and OAuth.

If you’re new to ethical hacking or bug bounty hunting, finding your first vulnerability can feel overwhelming. Many security flaws require…

Description:

Bug bounty hunting is not just about tools, exploits, or CVEs. It’s about mindset. You can have the best recon automation, the latest Burp…

Introduction

Introduction

So if you did not already read the part 1 here is the link

Introduction

Ever heard of a free vulnerability scanner that requires zero installation? Spoiler alert: It’s called Google.

TL;DR

Hiding Data In Plain Sight — Part Two

Lets dive directly on the bug so your reading time will not be wasted.

When I was hunting on a private program, I noticed an API that was not included in their scope, so I ignored it. However, after hunting for…

Zero Architecture model

The TryHackMe SAL1 Certification offers a robust framework for individuals aiming to deepen their cybersecurity expertise. Through a series…

I’m Abhijeet Kumawat, a passionate security researcher 🕵️‍♂️, and today, I’m excited to share a recent vulnerability story of how I…

In Linux, file permissions are a foundational security mechanism that define what actions users, groups, and others can perform on a file…

Durante las pruebas de seguridad uno de los desafíos es la sobrecarga de información en los logs, lo que puede dificultar la identificación…

Network services are often the primary entry point for attackers seeking to compromise a system. When misconfigured, they can expose sensitive data, allow unauthorized access, or serve as a foothold…

The Silent Threat That Can Crack Your Passwords…