Exploiting IDOR in Transaction Details Endpoint (API 2) —  CyberXbytes CTF 2025 Writeup

What is Reset Password Poisoning?

So, uhm.. I don’t know how to start writing about this but this is my first writing so I want to keep it genuine .

Hello everyone, Welcome to my First blog ever!!. A small intro is necessary here — I’m Praveen Raj. By day, I’m an Application Security…

The historical understanding of how attackers gain initial access to networks – through phishing emails with suspicious links, pretexting…

How AI Transforms Breached Data Into Precision Attacks Breaches themselves are not new – data theft has plagued organizations for two decades. What is fundamentally different in 2025 is that …

The cybersecurity arms race has entered a phase where the fundamental balance of power has tilted — perhaps irreversibly — toward…

The Cybersecurity Tutorial Series

Dark Web yıllardır hem merak hem de korku uyandıran bir konu. Ancak ortalık o kadar efsane dolu ki, gerçeği anlamak gittikçe zorlaşıyor. Bu…

How a Trusted Text Editor Became a Weapon — And How I Built Detection to Stop It.

South Asia’s Cyber Battleground: Bangladesh on the Frontline In an age when national security increasingly means digital security, governments from Dhaka to Islamabad and New Delhi face relentless …

Let’s be honest. The way we prove who we are online is a joke. We’ve become digital town criers, shouting our mother’s maiden name and the…

TLDR; This is Part 3 of our series investigating Operation Digital Eye, where Claude assisted suspected Chinese Intelligence Agencies in…

Originally published on my security blog — https://biscottidiskette.github.io/blog/2025/firstpurpleteam/

Task 1 — Introduction

OWASP 2025 data handling walkthrough with crypto, SSTI, and pickle exploits.

Task 1 — Recon

From “Package Not Found” to “Successfully Installed” A Human Guide to Linux’s Quirks

Executive Summary

Leveraging Weak File Permissions and Vertical Privilege Escalation to Achieve Root Access on TryHackMe’s Bounty Hacker.

For the first time in history, Chinese hackers carried out a large-scale cyberattack, with 80–90% of the work performed by artificial…