Retired Lab

Cyber threats are no longer uncommon in 2025; they’ve become a normal part of business life. Companies are facing challenges that evolve…

Executive Summary

One script can change your perspective more than one lecture.

The language of hacking isn’t binary it’s Python.

Cyber risk is now a business risk. That’s why NMT Security and AU Bank have teamed up to bring Indian businesses a powerful combination…

I’m excited to share that I have successfully earned the Hack The Box Certified Penetration Testing Specialist (CPTS) certification. This…

A JWT (JSON Web Token) is an open standard for securely transmitting information between parties as a JSON object. It contains claims —…

Hello,This is Salma Mohamed. I will be walking through a series of interesting web application security challenges, authored by 0xMesbaha…

Hello everyone, I’m Firda Nurelia (find me on LinkedIn). Today I’m sharing a concise write-up about a stored HTML injection I found in a…

It’s a private program so we’ll use redacted.com.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Welcome back, and what a week! We’re glad that happened for you and/or sorry that happened to you. It will get better and/or worse, and you will likely survive.

Today, we’re walking down the garden path and digging into the archives, publishing our analysis…

Minimal Docker-based bug hunting starter stack built with FastAPI and a background worker process.  Designed for security researchers…

link Room — https://tryhackme.com/room/howwebsiteswork

A Beginner-Friendly Guide to Ransomware-as-a-Service Without the Jargon

The web may hide its secrets, but mobile apps often leak them in plain sight

TLDR: Foothold — Custom web app + web enum + SQLi webshell; Privesc — NIL

pwn college dealing with data room writeup

In late September 2025, Unity quietly dropped a bombshell: a serious vulnerability affects every Unity version from 2017.1 onward across…