We learnt in the previous blog on CSRF (CSRF blog to refer) that, CSRF works when user is authenticated, and our work starts right from…

Após realizar minha primeira tentativa na nova certificação PT1 da TryHackMe, conseguindo 9 das 10 flags do exame, fico feliz em anunciar…

Introduction

Le 4 juillet 2025 marque un événement sans précédent dans l'écosystème Bitcoin : le transfert coordonné de 80 000 BTC, d'une valeur…

This is a walkthrough of NetworkMiner from TryHackMe

OSINT (Open Source Intelligence) Nedir?

Hi there! I am Ghizlane, a Cloud and DevSecOps engineer, passionate about making IT topics easy to understand. In this blog, I’m sharing my…

AIM: Creating a Virtual Lab

Python Temelleri

Or tech jobs in general… but we already knew that.

By Zhir Salih

The goal of this project was to create a honeypot virtual machine (VM) hosted on Microsoft Azure, collect and enrich failed RDP login…

I Just Wanted Coffee… But I Found a Security Disaster

On June 30, 2025, security researchers Ian Carroll and Sam Curry identified a major flaw in McDonald’s AI‑powered hiring platform, McHire, built by Paradox.ai and used by McDonald’s franchisees via…

Are they technically the same?

APIs (Application Programming Interfaces) have become the fundamental building blocks of digital ecosystems today. Businesses increasingly…

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

GitHub dorking is another way to leverage search engines to discover hidden assets and endpoints to increase your chances of finding vulnerabilities.

A hidden SQL injection flaw was staring at me, but Cloudflare’s WAF blocked every payload I threw at it.

🕵️‍♂️ Introduction

Conduct a live system analysis to uncover post-compromise activity related to persistence mechanisms.