Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

A White Hat’s Journey Through Lambda Misconfigurations & IAM Dangers

Sometimes, the difference between a standard pentest and a high-impact security discovery is simply… not stopping too early.

Some security flaws are so simple that almost anyone can grasp them with minimal explanation. The problem is that these common weaknesses…

Ever thought a simple disabled input field could be hiding a real vulnerability? It all started with a greyed-out email field, which I…

Hey everyone,

Hackerone: https://hackerone.com/yoyomiski

When testing a web application, hidden files and directories often hold the keys to the kingdom — backups, credentials, configuration…

Introduction: A Digital Gold Rush That’s Not Over Yet

Natas 3Walkthrough:

The skill that matters more than any certification

We’re thrilled to share that InfoSec Writeups is an official community partner of BSides Vizag 2025 — a grassroots security conference…

1/ “No code, 3 months to a tech job.” Sounds sweet, right? It’s just another entry on my list of capitalism scams. 2/ They sell dreams: → Fast track to high-paying gigs → CV optimization →…

Zorluk: Kolay | Kategori: Web, System

A Critical Flaw Exposes Jenkins Environments to Remote Code Execution

How to detect threats early, defend proactively, and stay resilient when the worst happens

Introduction
 EXIF metadata might sound like technical jargon, but it’s quietly hiding in nearly every photo you take — especially with a…

Email is one of the most critical communication tools for businesses and individuals alike. But it’s also a common target for…