Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

(And Why One Report Got Marked as “Duplicate”)

Blind-XSS Escalated from HTMLi السلام عليكم ورحمة الله و بركاته Hello Folks, In this writeup i’m sharing how i esclated HTMLi to Blind-XSS (Stored) in a Private Bug …

Here's how I found my first valid bug: After selecting a target, I started looking for website endpoints. After getting nothing, I felt lost because I had invested a lot of time and effort. But …

I was recently asked to share my perspective on a simple but deceptively deep question: “Where do you see cybersecurity in 2026?”

Identity theft is no longer a rare cybercrime. It has become one of the easiest and most profitable ways for attackers to make money. With…

And here’s the twist…

If you want to catch a liar, don’t look at their eyes. Don’t look at their body language. Look at their spreadsheet.

O Guardião — Fantasmas de Silicone

My Accidental Journey Into the Shadow Layers of Internet

December 3, 2025

When a reporting feature becomes a remote code execution vector, the devil is often in the details — and the code. Let me walk you through…

Uncover hidden corners of the internet with just one simple command.

Linux Hardening Checklist Implementations: A Deep Security Hardening Guide 🔐🐧 Linux remains the backbone of modern infrastructure thanks to its stability, flexibility and performance. Yet this …

Introduction

“Why would anyone hack me? I’m just a normal person.”  That’s where the story usually begins.

A LLM challenge where you use social engineering to trick the bot into revealing its confidential key

Government organizations sit at the heart of a nation’s functioning, handling everything from citizen records and public services to…

Submitted by: Yadhu krishnan U Target Host: 10.0.2.11 (Lab IP may vary) Operating System: Vulnerable Linux Server (Samba 2.2.1a) Date of…