The internet runs on a set of rules and standards that help browsers, servers, and applications communicate effectively. One such standard…

Local File Inclusion (LFI) vulnerabilities are among the most dangerous and common web application flaws — especially in PHP-based…

FingerprintX is a blazing-fast Go tool that outpaces Nmap in service detection and works perfectly with Naabu for bug bounty recon

Zomato Bugbounty

Hi, I’m Mrunal Chawda. I started my cybersecurity journey as an independent bug bounty hunter. Now, I have around 4 plus years of…

Bugün sizlere Hack The Box’ta çözdüğüm Valentine makinesiyle ilgili deneyimlerimi paylaşmak istiyorum. Bu makine, HTB’nin en eski…

Introduction

Al filo de la singularidad, el escenario en el que la IA lleve un ataque contra el ser humano ya no está tan lejos. ¿Cómo prevenirlo o…

In late 2024, cybersecurity provider SentinelOne discovered that it had become a direct target of a China-linked cyber-espionage operation…

This is a walkthrough of Cold System Forensics by TryHackMe

Hello everyone and welcome to this free virtual training proudly hosted by Sodienics Technologies! Today, we’re diving into one of the most critical aspects of our digital world — Cybersecurity. From…

This past week, Web3 reminded us once again: the greatest vulnerabilities aren’t always in code, but in humans, platforms, and…

When you log into your account and you get the disabled account message, as annoying as it may be, don’t panic. The first thing the app…

This is a brief glimpse into who I am — raw, honest, and still in progress.

SolarSx: How to Claim $SX

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

JWT Authentication Bypass via Algorithm Confusion

Most companies focus on protecting their main APIs. But attackers know that the real gold often hides in places security teams forget: old…

Welcome to this new Medium post. Today, we’re going to explore a creative way for processes to share data: using ghost files.

The OWASP top ten

Explored a DOM-based XSS vulnerability triggered by jQuery, to understand how client-side injection works.