How I Chained UI Confusion, SAML Redirect, and CSRF to Hijack JIRA Sync

3) Ransomware Saldırısı

A few years ago, when I was just an Intern, I worked on an Incident Response from a cyber attack in a Wordpress website. It was my first…

Overview

What’s Google Dorking, Anyway?

INFORMACIÓN DE LA MÁQUINA

In today’s digital world, mobile applications have become an essential part of our daily lives. From banking to shopping, chatting to…

Cyber threats have evolved. And when I asked 7 hackers how they’d steal data in 2024, their answers weren’t just terrifying — they were smart, specific, and painfully real. Forget shady emails…

In the context of a university project for my cybersecurity class, I decided to dive into the red team side, and see how far I could go by…

Your clicks, your data, their profit — here’s how ‘free’ apps are mining your life.

Login pages look boring, but they’re goldmines for OSCP students and pentesters. If you’re staring at a web login form, here are the two…

🔍 SMB & NFS Enumeration — No Fluff, Just Commands

The French Open Source Intelligence Survival Kit — Tips, Tools, Techniques, & the Ultimate Website Directory for France-Focused…

In today’s data-driven business environment, ensuring compliance with the General Data Protection Regulation (GDPR) isn’t just a legal…

A Step in the Right Direction

PicoCTF Basic Challenge:

The OSWE (Offensive Security Web Expert) is a hands-on certification focused on source-code-assisted web application exploitation.
 In…

In cybersecurity, waiting for a breach to act is too late.

Introduction:

I came across a new tool—Androidmeda—that caught my attention. It attempts to deobfuscate decompiled Android code using a large language model (LLMs). I decided to give it a try, and to my surprise, the results were far better than expected.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread