⤷ Title: From Internal IP Discovery to Full Database Dump
════════════════════════
𐀪 Author: Mustafa Hatab
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 18:00:08 GMT
════════════════════════
⌗ Tags: #web_app_pentesting #web_app_security #pentesting #bug_bounty #sensitive_data
════════════════════════
𐀪 Author: Mustafa Hatab
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 18:00:08 GMT
════════════════════════
⌗ Tags: #web_app_pentesting #web_app_security #pentesting #bug_bounty #sensitive_data
Medium
From Internal IP Discovery to Full Database Dump
In this write-up, I’ll walk through my findings, the steps taken to exploit the vulnerability with my little bro dotHatab
⤷ Title: How to Block Insecure .XLTX Uploads in a C#/.NET App
════════════════════════
𐀪 Author: Cloudmersive
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 18:17:11 GMT
════════════════════════
⌗ Tags: #file_upload_vulnerability #dot_net_framework #virus_scan #application_security #c_sharp_programming
════════════════════════
𐀪 Author: Cloudmersive
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 18:17:11 GMT
════════════════════════
⌗ Tags: #file_upload_vulnerability #dot_net_framework #virus_scan #application_security #c_sharp_programming
Medium
How to Block Insecure .XLTX Uploads in a C#/.NET App
Excel template documents (.xltx) aren't as common as standard spreadsheets, but they still pose a formidable risk to our .NET application.
⤷ Title: All about MITM- Spice things UP with it.
════════════════════════
𐀪 Author: err0rgod
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 18:06:53 GMT
════════════════════════
⌗ Tags: #mitm #hacking #hacker #cybersecurity #technology
════════════════════════
𐀪 Author: err0rgod
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 18:06:53 GMT
════════════════════════
⌗ Tags: #mitm #hacking #hacker #cybersecurity #technology
Medium
All about MITM- Spice things UP with it.
Man-in-the-Middle (MITM) Attacks — Exploiting Network Insecurity
⤷ Title: PHISHING — How it’s done
════════════════════════
𐀪 Author: err0rgod
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 18:05:00 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #technology #phising #hacker
════════════════════════
𐀪 Author: err0rgod
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 18:05:00 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #technology #phising #hacker
Medium
PHISHING — How it’s done
Phishing Attacks — Anatomy, Tools, and Protection
⤷ Title: The Human Side of Risk
════════════════════════
𐀪 Author: Azeezah
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 18:25:50 GMT
════════════════════════
⌗ Tags: #cybersecurity #risk_awareness #cyber_awareness #the_human_factor #infosec
════════════════════════
𐀪 Author: Azeezah
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 18:25:50 GMT
════════════════════════
⌗ Tags: #cybersecurity #risk_awareness #cyber_awareness #the_human_factor #infosec
Medium
The Human Side of Risk
How People Make (or Break) Security
⤷ Title: A Newbie’s Diary: Me and Clickjacking Vulnerability
════════════════════════
𐀪 Author: Bourhan Bouacida
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 19:50:01 GMT
════════════════════════
⌗ Tags: #diary #clickjacking #cybersecurity
════════════════════════
𐀪 Author: Bourhan Bouacida
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 19:50:01 GMT
════════════════════════
⌗ Tags: #diary #clickjacking #cybersecurity
Medium
A Newbie’s Diary: Me and Clickjacking Vulnerability
Introduction
⤷ Title: Why You Won’t Find Russian or Chinese Servers on Reputable VPNs (and Why That Matters)
════════════════════════
𐀪 Author: William Downing
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 19:45:48 GMT
════════════════════════
⌗ Tags: #vpn #online_security #trivia #cybersecurity #vpn_service
════════════════════════
𐀪 Author: William Downing
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 19:45:48 GMT
════════════════════════
⌗ Tags: #vpn #online_security #trivia #cybersecurity #vpn_service
Medium
Why You Won’t Find Russian or Chinese Servers on Reputable VPNs (and Why That Matters)
I want you to do me a favour right now. If you have access to a VPN, check whether you can select either Russia or China from the list of…
⤷ Title: Kali Linux : vacib əmrlər və alətlər (Part 1)
════════════════════════
𐀪 Author: alizadasec
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 19:40:39 GMT
════════════════════════
⌗ Tags: #kali_linux #cyber #kibertəhlükəsizlik #cybersecurity #linux
════════════════════════
𐀪 Author: alizadasec
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 19:40:39 GMT
════════════════════════
⌗ Tags: #kali_linux #cyber #kibertəhlükəsizlik #cybersecurity #linux
Medium
Kali Linux : vacib əmrlər və alətlər (Part 1)
Salam, hər vaxtınız xeyir olsun🙋♀️ Bu gün, kiber təhlükəsizlik sahəsində işlədilən ən məşhur əməliyyat sistemlərindən biri, yəni Kali…
⤷ Title: INE: Certified Incident Responder (eCIR) reviewwww, รีวิว eCIR
════════════════════════
𐀪 Author: Ppow
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 19:30:18 GMT
════════════════════════
⌗ Tags: #incident_response #blue_team #ctf #certification #cybersecurity
════════════════════════
𐀪 Author: Ppow
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 19:30:18 GMT
════════════════════════
⌗ Tags: #incident_response #blue_team #ctf #certification #cybersecurity
Medium
INE: Certified Incident Responder (eCIR) reviewwww, รีวิว eCIR
สวัสดีครับ ทุกท่าน , สำหรับบทความนี้เป็นบทความรีวิวการสอบใบ Cert eCIR ซึ่งเป็นใบที่ 8 ของผมคับ😁 อิอิ …
⤷ Title: Privacy Principles and Regulation
════════════════════════
𐀪 Author: 0xr4m!
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 19:22:22 GMT
════════════════════════
⌗ Tags: #regulatory_compliance #privacy_by_design #privacy #cybersecurity
════════════════════════
𐀪 Author: 0xr4m!
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 19:22:22 GMT
════════════════════════
⌗ Tags: #regulatory_compliance #privacy_by_design #privacy #cybersecurity
Medium
Privacy Principles and Regulation
This article is based on insights from Chapter 5 of the Inria White Paper on Cybersecurity. The original paper, available from Inria…
⤷ Title: Refresh Tokens Are Trickier Than Many Developers Think
════════════════════════
𐀪 Author: Sergey Egorenkov
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 19:13:13 GMT
════════════════════════
⌗ Tags: #programming #security #software_development #cybersecurity #software_engineering
════════════════════════
𐀪 Author: Sergey Egorenkov
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 19:13:13 GMT
════════════════════════
⌗ Tags: #programming #security #software_development #cybersecurity #software_engineering
Medium
Refresh Tokens Are Trickier Than Many Developers Think
It’s not enough to make them work, here’s how to make them secure, reliable, and hard to exploit.
⤷ Title: Shadows of LSASS Dumping: Evasion Techniques and the Ongoing Struggle of EDR Solutions to Defend a…
════════════════════════
𐀪 Author: Cytomate
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 18:57:47 GMT
════════════════════════
⌗ Tags: #edr #cybersecurity #post_exploitation #windows #red_team
════════════════════════
𐀪 Author: Cytomate
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 18:57:47 GMT
════════════════════════
⌗ Tags: #edr #cybersecurity #post_exploitation #windows #red_team
Medium
Shadows of LSASS Dumping: Evasion Techniques and the Ongoing Struggle of EDR Solutions to Defend a…
EDR vs. LSASS: Exploring stealth dumping techniques attackers use to bypass defenses and extract credentials undetected.
⤷ Title: How Can I Recover My Money From Triumphfx?
════════════════════════
𐀪 Author: James
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 18:56:22 GMT
════════════════════════
⌗ Tags: #money #this_happened_to_me #cybersecurity #writing #business
════════════════════════
𐀪 Author: James
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 18:56:22 GMT
════════════════════════
⌗ Tags: #money #this_happened_to_me #cybersecurity #writing #business
Medium
How Can I Recover My Money From Triumphfx?
I was denied my withdrawal after a huge amount of money I invested to this fake website, luckily I got help from Mrs Antonia and she helped…
⤷ Title: Gremlin Stealer: A Deep Dive into the Emerging Information-Stealing Threat
════════════════════════
𐀪 Author: Scott Bolen | RONIN OWL CTI
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 18:54:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #information_security #threat_intelligence #infostealer
════════════════════════
𐀪 Author: Scott Bolen | RONIN OWL CTI
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 18:54:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #information_security #threat_intelligence #infostealer
Medium
Gremlin Stealer: A Deep Dive into the Emerging Information-Stealing Threat
It feels like the world of cyber threats never stands still, doesn’t it? Just when we think we have a handle on things, new sneaky tools…
⤷ Title: Freelance Cybersecurity: How to Land Your First Client
════════════════════════
𐀪 Author: Ahmad Javed
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 18:42:59 GMT
════════════════════════
⌗ Tags: #cybersecurity_training #freelancing #freelance_cyber_hero #freelancers #cybersecurity
════════════════════════
𐀪 Author: Ahmad Javed
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 18:42:59 GMT
════════════════════════
⌗ Tags: #cybersecurity_training #freelancing #freelance_cyber_hero #freelancers #cybersecurity
Medium
Freelance Cybersecurity: How to Land Your First Client
From Panic to Paychecks — How I Turned My Paranoia Into a Thriving Career
⤷ Title: Off-Chain, On Fire: How Web2 Vulnerabilities Still Haunt Web3
════════════════════════
𐀪 Author: Olaboyefavour
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 18:51:01 GMT
════════════════════════
⌗ Tags: #web3 #blockchain #dapps #security #ssrf
════════════════════════
𐀪 Author: Olaboyefavour
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 18:51:01 GMT
════════════════════════
⌗ Tags: #web3 #blockchain #dapps #security #ssrf
Medium
🚨 Off-Chain, On Fire: How Web2 Vulnerabilities Still Haunt Web3
🧠 TL;DR
⤷ Title: Insecure Deserialization
════════════════════════
𐀪 Author: 0xSt4n
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 21:38:20 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #hacking #ethical_hacking
════════════════════════
𐀪 Author: 0xSt4n
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 21:38:20 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #hacking #ethical_hacking
Medium
Insecure Deserialization
While exploring web application security, I delved into the topic of Insecure Deserialization and found it both intriguing and critical…
⤷ Title: Introduction to YARA Rules: A Complete Beginner’s Guide
════════════════════════
𐀪 Author: Analyst Atlas
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 21:32:45 GMT
════════════════════════
⌗ Tags: #cybersecurity #data_science #technology #hacking #information_technology
════════════════════════
𐀪 Author: Analyst Atlas
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 21:32:45 GMT
════════════════════════
⌗ Tags: #cybersecurity #data_science #technology #hacking #information_technology
Medium
Introduction to YARA Rules: A Complete Beginner’s Guide
YARA is a powerful tool widely used in the cybersecurity world for identifying and classifying malware, files, or processes based on…
⤷ Title: Could Your Toaster Be a Spy?
════════════════════════
𐀪 Author: Tina Ginn
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 20:45:26 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #digital_security #technology #humor
════════════════════════
𐀪 Author: Tina Ginn
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 20:45:26 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #digital_security #technology #humor
Medium
Could Your Toaster Be a Spy?
And Other Cyber Nightmares You’ve Probably Ignored
⤷ Title: Building a Plugin Architecture for Your Python C2 Implant: Modular Malware the Right Way
════════════════════════
𐀪 Author: Maxwell Cross
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 20:26:25 GMT
════════════════════════
⌗ Tags: #hacking #python #cybersecurity #programming #coding
════════════════════════
𐀪 Author: Maxwell Cross
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 20:26:25 GMT
════════════════════════
⌗ Tags: #hacking #python #cybersecurity #programming #coding
Medium
Building a Plugin Architecture for Your Python C2 Implant: Modular Malware the Right Way
In our previous articles, we explored how to build a custom Command and Control (C2) server in Python and techniques for evading antivirus…
⤷ Title: ️ Smarter Detections: Creating SIGMA Exclusion Rules in CoPilot for Velociraptor Alerts
════════════════════════
𐀪 Author: SOCFortress
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 20:23:09 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #socfortress #open_source #information_security
════════════════════════
𐀪 Author: SOCFortress
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 20:23:09 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #socfortress #open_source #information_security
Medium
🛡️ Smarter Detections: Creating SIGMA Exclusion Rules in CoPilot for Velociraptor Alerts
In our last post, we set up SIGMA rule analysis using Velociraptor and successfully piped those alerts into CoPilot, giving us a powerful…