Contributors : CYB3RLEO (Penetration Tester) , Fagbohun Emmanuel (Cloud Security Engineer) & Hawksec (Penetration Tester)

Estaba hoy mirando las noticias, de esa manera que tienes de pasar titulares en diagonal mientras te tomas el café, y me llegó esto del…

Room: https://tryhackme.com/room/watcher  Summary: a Linux boot2root that combines basic web enumeration, LFI/FTP abuse, simple webshell…

“Reading people is an art like reading a book without words. Every gesture, every silence, every look tells a story. Understanding people…

All Recon with One Click

I was testing an online store late at night. The site looked solid: carts, payment success pages, order histories. But the fulfilment UI…

Unveiling the Hidden Web: Mastering Certificate Transparency Logs for Subdomain Discovery in Bug Bounty Hunting

Introduction

Server-Side Request Forgery (SSRF) is a security vulnerability that allows an attacker to induce the server-side application to make HTTP…

Predictive and explanatory perspectives

Dans l’univers du pentesting et du bug bounty, l’énumération de répertoires et de fichiers constitue une phase critique de la…

Saya saat ini masih kuliah di jurusan keamanan siber dan belum memiliki pengalaman mengikuti sertifikasi apa pun di bidang ini. Meski…

SCP Setup and Configuration

Or how I learned that sometimes the real challenge isn’t the exploit, it’s understanding why your CSRF token is just MD5(username)

Discord users faced a security incident following a breach of one of the platform’s external customer support vendors. The compromise…

The New Age of Romance Scams: How to Avoid Becoming a Victim in 2025 Romance scams in 2025 have evolved into one of the most emotionally manipulative and technologically advanced forms of online …

As businesses move to the cloud, they rely on multiple applications to drive productivity, collaboration, and customer engagement. However…

Have you ever wondered what really happens when you “delete” a file? In most cases, that file isn’t truly gone — it’s simply hidden from…

When businesses handle sensitive customer data, especially in industries like finance, healthcare, and cloud services, trust and compliance…

Como um script em PowerShell abusa do WhatsApp Web para disparos em massa enquanto um VBS com persistência dupla usa IMAP para bootstrap de…

Earlier this week, I facilitated a highly insightful discussion panel on technology and cybersecurity at the launch event for NCBA…