Still using subfinder & sublist3r tools for finding assets while recon??

How Recon and Persistence Led to a Valid XSS on Mercedes-Benz

Phabricator SSRF Vulnerability: Unauthorized Access

TL;DR

👋 About Me

Hey there!😁

One of the most common methods attackers use to maintain access to compromised systems is persistence via the Windows Registry. The…

Ahoy, hacker sailors! ⚓ Whether you’re a seasoned bug bounty hunter or a script kiddie-turned-cyber-ninja, you know the thrill of…

Redirects + OAuth = A Recipe for Token Theft

How a simple file upload feature became a hacker’s playground — and my payday.

การที่ระบบไม่ได้เซ็ตค่า Attribute บางอย่างใน Session Cookie นั้นมันดีหรือไม่? — Testing for Cookies Attributes (WSTG-SESS-02)

In today’s digital-first landscape, businesses are under increasing pressure to innovate, adapt, and deliver enhanced user experiences…

Imagine this: your source code, commit history, and even credentials — all quietly exposed, just because of a forgotten directory in your…

Cyber threats evolve fast, and your defenses should too. Learn the difference between firewalls and WAFs — and why having both is critical…

If you’re developing applications in the digital publishing space, there’s a good chance you’ve worked with .epub files. They seem simple…

XPS (.xps) files — Microsoft’s PDF alternative — might not be as common today, but they can still show up in certain document workflows…

The screenshots’ brutally pragmatic Chinese advice — about money, careers, and social Darwinism — translates shockingly well to America’s…

It’s wasn’t raining when Noah built the ark.

By Shah kaif | “Cyber Kill Chain for Beginners: A simple, step-by-step guide showing how hackers attack and how you can stop them.” |…