1. Initial Access

Hello! Today, I’m taking you through my experience of trying Kali Linux for the first time, and playing the Bandit wargame. I went through…

It’s Friday, but we’re here today with unscheduled content - pushing our previously scheduled shenanigans to next week.

Fortinet is no stranger to the watchTowr Labs research team. Today we’re looking at CVE-2025-25256 - a pre-authentication command injection…

Introduction: The Opportunity of a Lifetime

By Rajkumar Kumawat  Ethical Hacker | AI Builder | GitHub | LinkedIn | Medium

I’ve been diving into the security of a web application recently, and what started as a routine look at its file upload flow turned into a…

Two years ago, while testing a web application, I discovered an interesting **Reflected Cross-Site Scripting (XSS)** vulnerability.

Subtitle: When Input Sanitization Fails to Show Up for Work

This guide explains basic server-side template injection (SSTI) in Ruby’s ERB engine, showing how an injection flaw can allow attackers to…

Sometimes, the best vulnerabilities are hidden in plain sight — or rather… hidden in HTTP headers! 📡  This is the story of how I…

Durante meus estudos de aprofundamento em XSS, me deparei com uma forma divertida de dar bypass em limite de caracteres de um input.

Greetings fellow hackers, my name is Sandy, InfoSec Consultant and Bug bounty hunter.

Natas 6 Walkthrough:

Say “hacking” and most people think of stolen data, compromised accounts or a hooded figure in a dark room. That’s one part of the story…

A Home Lab Dedicated for Ethical Hacking (Vulnerability Scan)

Cybersecurity isn’t just about putting up defenses — it’s also about understanding how attackers actually operate.
 That’s where the MITRE…

Emerging in early 2025, the Crypto24 ransomware group has rapidly distinguished itself as a high-sophistication, double-extortion…

A newly identified Android threat, known as PhantomCard, is redefining the scope of mobile banking attacks in Brazil by exploiting Near…

By Gba Henri Joel aka LBX18

🔐 Welcome to Day 1 of my 30-Day Cybersecurity Awareness Series!
Over the next month, I’ll break down complex security concepts into…