A Python script to inspect and test Cross-Origin Resource Sharing (CORS) headers for security vulnerabilities. The tool sends HTTP and…

I am excited to start my Bug Bounty Journey. Let’s start learning together starting from today. Connect to learn and practice with me.

In this article, I will share some insights about a serious cyber attack model. Commonly referred to as a supply chain attack, this model…

This post is produced in collaboration with Resonance Security — cybersecurity for all.

Cyber threat actors have escalated their attacks on critical infrastructure, deploying stealthy malware that blends seamlessly with legitimate Linux system processes. A recent incident involving…

With Special Reference to the Sri Lankan Context

On April 28, 2025, Hitachi Vantara — the data infrastructure subsidiary of Hitachi Ltd. — took decisive action by pulling some of its…

Normally, I do not add the course documents to my hands-on practice posts if their existence isn’t a must for the question. But this time…

When we navigate to the IP address, we are redirected to the website.

Have you ever wondered how you would systematically respond to a cyber attack on your company? Or even better, how would you prevent…

AWS breaches don’t start with zero-days — they start with misconfigurations.

SafeLine WAF supports containerized deployment via Docker. You can get it up and running in under 5 minutes using either an installation script or a graphical tool like MuYun. | Dependency | Value |…

Buckle up, hackers! I recently tackled the Lookup room on TryHackMe, a fantastic CTF challenge that tested my enumeration, exploitation, and privilege escalation skills. From uncovering usernames to…

Bij DeepBlue Security & Intelligence is het uitvoeren van pentesten een van onze specialiteiten en wij doen dit dan ook op een dagelijkse…

Creating custom tooling for application testing using Python.

In post-exploitation scenarios, the first move isn’t always lateral — it’s network reconnaissance. After landing a shell, every skilled…

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Part 2/8 | Android Hacking Masterclass

Hello! I’m yee-yore, conducting research in the field of LLM-based web bug hunting and pentesting. Today, I’d like to introduce DorkAgent…