Join me as I tackle the eJPT one topic at a time. CTF 1 Host and Network Penetration Testing: Exploitation.

In the world of cybersecurity, there’s a constant cat-and-mouse game being played. On one side, you have the defenders with their…

Introduction

Cyber attacks are a fact of life in the information age. For any organisation that connects to the internet, the issue is not if an attack will come, but when. Most cyber attacks are performed by…

🧠 Introducción

In today’s post, I tackled a hard truth:

You plug it in, set a strong network name, maybe a decent credential, and forget about it. Your Wi-Fi router quietly sits in a corner…

As digital threats continue to evolve, so do physical security risks for commercial properties. Businesses can no longer rely on…

You built it. You deployed it. You even obfuscated the code. But is it secure enough?

These days, children are perpetually connected — swiping through apps, messaging on social media, and surfing the internet. Technology…

Crimea Control Crumbles

In today’s threat-prone business environment, securing your premises is about more than just locking the doors. Organizations need to…

A Personal Reflection on Imposter Syndrome and Staying in the Room

From DOM-based XSS to misconfigured CORS policies — here’s how I dissected real-world JavaScript vulnerabilities in smart home dashboards…

If you’re new to ethical hacking or just exploring Termux tools, then this one’s for you. In this post, I’ll walk you through ReconDog, a…

Disclaimer: This blog is for educational and awareness purposes only. All images, examples, and references used are taken from publicly…

Explore modern NoSQL security techniques, common vulnerabilities, and best practices to protect your cloud databases and JSON data…

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

In the ever-evolving landscape of cybersecurity, one of the most underestimated and overlooked vulnerabilities remains the Insecure Direct…

## Introduction 
Bug bounty hunting isn’t just about blasting payloads or brute forcing right away — it’s about smart reconnaissance and…

Recently, I stumbled upon a classic yet dangerous misconfiguration:
 an exposed GraphQL endpoint that handed over sensitive user data no…