Learn how to identify and hunt for SSRF vulnerabilities in Next.js targets using different testing methods. Read the article now!

Introduction

RST TI Report Digest: 22 Sep 2025 This is a weekly threat intelligence report review from RST Cloud. This week, we analysed 58 threat intelligence reports and compiled a brief summary of each along …

AI vs. Hackers: The Next Cybersecurity Frontier Artificial Intelligence isn’t just powering smart assistants and self-driving cars—it’s reshaping the battlefield of cybersecurity. AI can be the …

1] Overview

Explore 7 fast-growing freelance tech niches in 2025. Learn where demand is rising in AI, blockchain, cloud, and design to boost your…

Why your weekly grocery run might be funding a cybercriminal’s luxury vacation

Hey, fellow ethical hackers and blue teamers! 👋

1. Introduction: The End of Untouchable Underground Forums

In the unseen realms of the internet,recent research has proved that a relentless battle rages — a war waged by shadowy figures who…

Why a French woman’s €830,000 loss is everyone’s problem now

Learn how to set up a rooted Android emulator on macOS and connect it with Burp Suite for seamless HTTPS traffic interception.

Task 1: Ye Ol’ Search Engine

Room: Advent of Cyber 2

Description : Read user.txt and root.txt

Introduction

When I start hunting on a new target, I turn Burp’s proxy on, then start using the target’s app/platform as if I was a normal user.

Imagine you’re scrolling on your phone, chill mode on. A site asks you to go fullscreen — maybe it’s a video, maybe it’s a game. You tap…

Hi Everyone,

𝘏𝘦𝘭𝘭𝘰, 𝘐’𝘮 𝐇𝒐𝐬𝐬𝐚𝐦 𝐌𝒐𝐬𝐭𝐚𝐟𝐚, 𝘬𝘯𝘰𝘸𝘯 𝘪𝘯 𝘵𝘩𝘦 𝘉𝘶𝘨 𝘏𝘶𝘯𝘵𝘪𝘯𝘨 𝘤𝘰𝘮𝘮𝘶𝘯𝘪𝘵𝘺 𝘢𝘴 𝑽𝒊𝒑𝒆𝒓. 𝘐…

TL;DR — I found an IDOR bug that let me sneak my user into another tenant’s department, even though cross-tenant access was supposed to be…