A hands-on walkthrough to find, test and exploit Actuator endpoints for bug hunters.

The Day My Site Was Almost Lost

A hands-on walkthrough to find, test and exploit Actuator endpoints for bug hunters.

Complete, hands-on guide to Prototype Pollution. Client & server exploitation, jQuery/hash vectors, DOM XSS, Node.js RCE for bug bounty.

This is a description the steps which I took to solve portswigger lab about XML external entity injection[1]: Exploiting blind XXE to…

A list of moments that made crypto investors cry

A new technical post on Maveris Labs detailing a few favorite EDR evasion/bypass techniques from one of our Maveris Red Teamers.

Core dumps are meant to help developers debug crashing applications.  But on production servers, they can quickly become a security…

The digital transformation of the Kenyan economy is not just a trend; it’s a fundamental reshaping of how business is done. But as…

Imagine starting your workday as usual — you open your laptop, log into your accounting software, and suddenly a red message flashes…

Link: https://tryhackme.com/room/metasploitintro

Link: https://tryhackme.com/room/passiverecon

# Carpe Diem 1 Recover your clients encrypted files before the ransomware timer runs out! [Carpe Diem 1]…

The Rising Threat Landscape

My Cybersecurity Journey: From Learning to Doing After earning my Junior Cybersecurity Analyst certification with Cisco, I knew I wanted to take things further. I needed more hands on experience …

A complete guide for anyone searching “Is Pzmqgow.top a scam?” and looking for answers.

What Are VAPT Services?