Master Burp Suite Techniques to Bypass 403 Responses and Uncover Hidden Vulnerabilities

MOI-CTF: Cybersecurity Directorate, Hireplus (Web Challenge). SQL Injection via sort parameter to dump DB and retrieve the flag.

When it comes to recon and security testing, MX records often fly under the radar. But hidden inside them can be clues to…

Introduction to NFS

If you’ve ever wondered what it’s like to get paid to hack into systems — legally — then welcome to the world of penetration testing and…

İnternet dünyasında güvenliğimiz ne kadar önemliyse, bu güvenliği tehdit eden siber saldırılar da o kadar çeşitli ve karmaşık hale geliyor…

Hi, I’m Bhuwan Patidar, a VAPT analyst, Pentester and hacker from Indore, India, with active learning goals , ethically reporting…

Today we are solving the snort basics room in tryhackme. You need the complete snort room first.

Fix: Update Git immediately. Seriously.

A true story, why you shouldn’t open random links.

In the rapidly evolving landscape of artificial intelligence, agentic AI has emerged as one of the most fascinating and powerful…

Security Crisis Opening (near-miss)

A cryptographic thought experiment

Room Link : https://tryhackme.com/room/h4cked

It has been barely a day since I cleared the exam and I thought while im still on a high of a successful exam, why not write about it and…

You’ve meticulously patched your dependencies. You’ve fortified your endpoints against SQLi and XSS. Your authentication is robust. You…

Herkese merhaba 👋 Bugün TryHackMe üzerinde bulunan Bounty Hacker odasının çözümünü göstereceğim. Bu odada temel bilgi toplama, brute…

Hey everyone 👋  In today’s blog, we’re diving into the PS Eclipse room on TryHackMe. This challenge is all about using Splunk to…

Task 1: Introductuion
Malware refers to software or code created to damage systems, steal information, or allow unauthorised access. It…

So, here we are in Warzone 2 🕹️ — a challenge-style room on TryHackMe. You’re playing the role of a Tier-1 SOC analyst at an MSSP, and…

Most people know the OWASP API Top 10. It’s like the “greatest hits” of API security risks. But if you have done pentesting or bug hunting…