Have you ever tried running commands like ls, pwd, etc. using editors like vim, vi, or even tools like awk? Well, you actually can — and…

I found sqli and html injection in IITKGP’s domain.

I have been doing a lot of labs and reading resources to understand more about XSS and techniques that come with it. Recently I came…

Aim:

Scope: CDN/API gateway/reverse proxy/ingress/service-mesh layers (Cloudflare, Akamai, Fastly, CloudFront/ALB/APIGW, Azure Front Door…

TL;DR Walkthrough of the VulnNet: Active TryHackMe room.

What is the first flag you receive after successfully detecting sample1.exe?

by Ayush

While testing an API endpoint with a colleague, a single quote accidentally slipped into a parameter — and the server responded…

Hello! I’m new to bug bounty hunting and security research, and this post is about my experience in finding and reporting my first serious security vulnerability for a site listed on…

When we think of OAuth, most imagine it as a secure, battle-tested protocol that giants like Google, Facebook, and Twitter rely on for…

Rate limits are supposed to stop abuse. They make sure you can’t spam actions like login attempts, password resets, or email verification…

In today’s digital world, running an online business means more than just delivering great products or services, it also means defending…

Become a Part of a New Publication, that brings together Ethical Hackers, Bug Bounty Hunters, IT Specialist, and Much More!

Google awarded a groundbreaking $250,000 bounty to security researcher Micky for identifying a critical remote code execution flaw in…

Injection attacks have haunted web applications for decades. From classic SQL Injections (SQLi) to modern-day Server-Side Template…

Hack The Box helps you level up your cybersecurity skills with gamified, practical, and engaging training.

How I Found a $5,000 Vulnerability in 10 Minutes (Without Writing a Single Line of Code

I’m Yamini Yadav, your Security Engineer with OSCP certification and your dedicated guide through the complexities of web security. After…

Author : syreal

Now let’s look at privilege escalation through intended functionality. Suppose the low-privileged user we’ve compromised has been granted…