5 principles every pentester should know (short, sharp & practical) 🚨🛠️

Build a repeatable Android testing environment that lets you move from reconnaissance to exploitation 🛠️📱

ΔE and the Human: What It Means to Feel Meaning

Hackers Are Earning 💸$XX,000+ With This Secret Trick

I was engaged to do a blackbox assessment of a SaaS web application hosted on a major cloud provider. The app accepts a URL from the user…

postMessage` XSS: It’s Like Passing Secret Notes in Class… But the Whole School Can Read Them** 📝➡️🔓 Hey team, let’s talk about one of the web’s sneakiest vulnerabilities: the …

CyCTF25 Qualifications — Vault Raider, Mobile Challenge Writeup بسم الله الرحمن الرحيم Shoutout to Sho3la, Omar Elfakharany, v0ilt, S0VA. Quick summary The app was unpacked and …

In this writeup, I am going to present a bug which was not found by me, but that I would still love to share, as I think this is a very…

What Rust stops. What you still must defend.

Introduction

Introduction

Introduction

Lab: Unprotected admin functionality

What is a Honeypot?

Welcome to this Medium post. In it I’ll show an interesting technique to evade Windows Defender and execute an EXE that has been converted…

In this challenge, you’ll take a look at an email conversation between one of your employees and some strangers. To get started, just open…

Or: How I accidentally created a vulnerability, exploited it like a black hat, then built a trap that catches every attack in real-time

APIs are the backbone of modern applications. This guide presents safe automation scripts, detection patterns, and practical test…

Investigate the fourth, Disk part of the Honeynet Collapse!

Hello everyone! After working through the Linux Fundamentals module on Hack The Box Academy, I’m moving on to the next step in the Junior…

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread