Hey hackers 👋 — this post is a fun deep dive into a critical authentication vulnerability I discovered during a recent security test. It combines one of my favorite web bugs (race condition) with a…

In 2016, Uber learned a brutal lesson when hackers used credential stuffing to breach employee accounts, exploiting reused passwords to…

The Hook: A $10,000 Find in Under an Hour

When a hacker pokes at a website or an app, every response from the server is a message. These messages aren’t always words — they come as…

A detailed guide to hacking the Harder machine on TryHackMe — Hidden domain, Git, web shells, Linux privilege escalation.

I managed to pass the Burp Suite Certified Practitioner exam the first time in just 60 minutes — with the first application taking me only…

The offensive security landscape is undergoing a seismic transformation with the emergence of Crossbow AI (Xbow AI), a platform engineered…

e porque o capitalismo digital está nos assaltando

💭 In every project, there comes a moment…

Let’s investigate Malware Traffic captured by Wireshark!

For years, cybersecurity was often seen as “just an IT issue,” tucked away within the technical department of a business. Leaders could…

— A Practical CMMC-Level Decision for Small Defense Contractors

By Susmitha Rajendran  July 2025 | Cybersecurity | Certifications | InfoSec

From Firewalls to First Principles

Complete Security Monitoring Setup

Reflections from Day 1 as a Course Assistant for the NYU K12 STEM Education CS4CS Program

Join me as I tackle the eJPT one topic at a time. CTF Host and Network Penetration Testing: The Metasploit Framework.

They say HTTP headers are harmless — until you inject one and the server starts making bad life choices. If you’re into bug bounty hunting…

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Google secures 3GW of hydropower in a $3B deal to power its AI data centers, while the tech industry faces mounting criticism over its massive water consumption.

A former US Army soldier, Cameron John Wagenius (kiberphant0m), pleaded guilty to hacking telecom companies, stealing data, and attempting to extort $1 million.