Blog migration, find my new article here: https://blog.ayoubnouri.me/blog/when-the-price-goes-wrong

Hidden parameters and undocumented APIs are like gold nuggets for hackers 💰 — if you know where to look.

When it comes to exploiting web applications, nothing is more thrilling than turning a simple form input into a foothold on the server.

Enroll today: https://imp.i384100.net/da65LK

In the rapidly evolving world of Android applications, securing your releases against lurking vulnerabilities is no longer optional — it’s…

A detailed guide to hacking the Anonymous Playground machine on TryHackMe — Cookie Manipulation, Reverse Engineering, and TAR Wildcard…

Stealing crypto is easy — and it’s powered by institutional-grade criminal infrastructure. In the world of Web3, stealing cryptocurrency…

مراجعة شاملة لـ Samsung Galaxy Z Fold 7: المواصفات، المميزات والعيوب. اكتشف كيف صمد الهاتف في اختبار المتانة لأكثر من 200 ألف طية، وهل…

This is a walkthrough of Brim from TryHackMe

Another week, another Firebase breach. The Tea app’s recent fiasco is just the latest in a long, frustrating line of incidents that expose…

Cyber security authorization stands as a cornerstone in safeguarding digital assets, meticulously controlling who can access what resources…

In the digital realm, establishing and confirming a user's identity is the foundational pillar of cyber security. Authentication acts as…

In the digital age, the pervasive flow and storage of information necessitate robust mechanisms to safeguard its confidentiality…

In an increasingly interconnected digital world, safeguarding sensitive information is paramount for individuals and organizations alike…

In the rapidly evolving digital landscape, cybersecurity stands as a crucial bulwark against an array of threats, yet its practices are…

Introduction

During a casual weekend pentest on mysamay.in, a platform used for marathon registrations across India, I stumbled upon something wild:

Welcome to another Hack The Box walkthrough. The machine we are going to pwn is the GreenHorn machine. Today, we will look at how to pwn…

بِسْمِ اللَّهِ الرَّحْمَنِ الرَّحِيمِ

Proton Authenticator for iOS exposed TOTP secrets in plaintext logs, risking 2FA account leaks. A swift patch fixed it—but trust may take longer.

Trend Micro warns of two critical RCE flaws (CVE-2025-54948, -54987) in Apex One (on-prem) actively exploited in the wild. A fix tool is available, but disables remote agent installs.