Ever wonder what really goes on inside a hacker’s head? Forget the movies with the green text flying across the screen and the dramatic…

In this digital age, APIs are the lifeblood of modern applications, and JSON Web Tokens (JWTs) often serve as the key that guarding your…

I recently went down the rabbit hole of JWT authentication and came out with a ton of insights. What started as a simple question — “how…

After completing my API penetration testing training from Apisec University, I decided to put my new skills to the test with a practical exercise. For this purpose, I chose Vuln-Bank, a deliberately…

Overview: the app was for donations and allowing creating custom thank you message to be at the end of every receipt that will be sent to…

L’émergence des modèles de langage à grande échelle (LLM) représente une révolution technologique comparable à l’avènement d’Internet. Ces…

I discovered a vulnerability in Facebook’s Pages product that allowed an attacker to disclose appointment details of any page, including…

In September 2020, I discovered a vulnerability in Facebook’s Rooms feature inside Groups that allowed attackers to disclose members of…

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

An expert-crafted Source Code Audit Checklist covering secure coding, vulnerability scanning, and code review techniques to safeguard your…

Android Malware developers are corrupting APK files to bypass static analysis, creating new challenges for reverse engineers. Lets dig in.

Ready to explore another Root Me challenge!!

Nos últimos tempos, ferramentas têm sido alvo de debates acalorados nos círculos de segurança da informação.  Alguns defendem que elas…

🚨 Massive Cyberattack on India’s Independence Day

How a Ghost User Lived in My Network for 6 Months And What They Stole Without Me Knowing

A few months ago, I set out to create KiKard, a custom NFC testing board meant for part two of my NFC Card emulation series. It was an…

Lets talk about the privilege escalation via LD_PRELOAD, if you run the command sudo -l you would see and enviroment varibale as LD_PRELOAD…

Scams so sneaky, they’ll steal your wallet and your sanity

A injeção no header do JWT (JSON Web Token) é uma vulnerabilidade que permite a atacantes manipular o header do token para comprometer a…

When people think of viruses, they picture pandemics, hazmat suits, and overcrowded hospitals. But what if the next outbreak didn’t spread…

“The greatest danger in times of turbulence is not the turbulence itself, but to act with yesterday’s logic.”
 — Peter Drucker