Race Conditions are some of the coolest bugs you can find in a Web Application.

This three-part series is a complete, story-driven redesign of my original notes on File Inclusion vulnerabilities. It’s written to feel…

Article that talks about additional steps that developer teams can take to secure the software supply chains of their applications

Why You Should Choose an Ethical Hacking Course Online in 2026

Your wallet just got drained and you’re staring at the transaction like an idiot. Where did your tokens go? Who took them? Good luck…

In today’s digital era, cybersecurity is more crucial than ever. Ethical hacking has emerged as a vital skill set for IT professionals who…

A Step-by-Step Walkthrough of Enumerating AD Services and Gaining Administrator Access on the Misconfigured Machine

This project is one I created as part of my journey to deepen my cybersecurity skills. The goal was to deliberately build an insecure…

Lab Link: https://cyberdefenders.org/blueteam-ctf-challenges/t1110003/

A visual breakdown of Privacy Pass (RFC 9578), the cryptographic standard replacing “Click the Fire Hydrant.”

Cyber threats now strike more frequently, powerfully, and with greater complexity than ever before. As companies move to cloud…

When I’m bored, I code or sometimes i write 💻
here a list of chapters of a penetration test report, which summarizes a collection of best…

Lab: Username enumeration via different responses

Welcome! This write-up walks through the Era machine on Hack The Box. My goal is simple: stay motivated, record what I learn, and explain…

Discover all the ways to unlock rewards and bonuses with XGPT.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

What happens when you ditch the tiered ticket queues and replace them with collaboration, agility, and real-time response? In this interview, Hayden Covington takes us behind the scenes of the BHIS Security Operations Center, which is where analysts don’…

1. Login → Session → Logout Flow

Why manual verification beats automated scanners every time. A deep dive into CVE-2016–10033.

The host cannot access the “About” page on the facebook event.