Hello, everyone! 
Welcome to my first-ever CTF write-up blog! I’m super excited to share my journey with you.

Cyberattacks are no longer a matter of if but when. Businesses of all sizes face constant risks from hackers, insider threats, and even…

Introduction

OWASP Juice Shop, sızma testleri ve güvenli yazılım geliştirme becerilerini kazanmak için oluşturulmuş ve birçok zaafiyeti içinde…

Submitting a random email followed by a ' triggers a 500 SERVER ERROR indicating potential SQL injection. Also, note that clicking on Admin redirects to https://admin.usage.htb/, so make sure to add…

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

A White Hat’s Journey Through Lambda Misconfigurations & IAM Dangers

Sometimes, the difference between a standard pentest and a high-impact security discovery is simply… not stopping too early.

Some security flaws are so simple that almost anyone can grasp them with minimal explanation. The problem is that these common weaknesses…

Ever thought a simple disabled input field could be hiding a real vulnerability? It all started with a greyed-out email field, which I…

Hey everyone,

Hackerone: https://hackerone.com/yoyomiski

When testing a web application, hidden files and directories often hold the keys to the kingdom — backups, credentials, configuration…

Introduction: A Digital Gold Rush That’s Not Over Yet

Natas 3Walkthrough:

The skill that matters more than any certification

We’re thrilled to share that InfoSec Writeups is an official community partner of BSides Vizag 2025 — a grassroots security conference…

1/ “No code, 3 months to a tech job.” Sounds sweet, right? It’s just another entry on my list of capitalism scams. 2/ They sell dreams: → Fast track to high-paying gigs → CV optimization →…

Zorluk: Kolay | Kategori: Web, System