Free Link 🎈

I wrote an article titled “Vulnerability Highlight: Beavers, Insufficient Logging and Monitoring,” and we learned about Insufficient…

Bu bölümde, iş mantığı zafiyetleri kavramını tanıtacağız ve bu zafiyetlerin, kullanıcı davranışları hakkında yapılan hatalı varsayımlar…

Bu labda, kullanıcı hesap sayfasında yatay yetki yükseltme zafiyeti bulunuyor ancak kullanıcılar GUID değerleriyle tanımlanıyor. Amaç…

CVE‑2025‑66516 is a maximum‑severity XXE vulnerability in Apache Tika that lets attackers weaponize PDFs with malicious XFA content to…

Honestly, I was too lazy to make a detailed write‑up this time, so I’m just sharing the script I used.

Learn what the Windows Registry is and how to investigate it

Learn what the Windows Registry is and how to investigate it.

Hey everyone, in this blog, we will see how to identify RCE via LFI using manual and automated approaches. So let’s begin

pgAdmin 4 Meta-Command Filter Bypass , Attackers can craft a malicious PLAIN-format SQL dump that bypasses pgAdmin’s meta-command filter

Authentication and authorization are often combined under the general term "auth." While closely related, they solve different problems…

I wrote an article titled “Broken Access Controls — Protect The Fortress!” as we dove into authentication and authorization, and what…

This is a description the steps I took to solve Infinity Learning lab — Assume & Decrypt (or vice versa)[1]. It is classified as an medium…

Continue your Advent of Cyber journey and learn about container security.

Welcome back, hackers! Today, we’re solving the asm2 challenge from PicoCTF 2019. This one … well, it was not easy, let’s say that first……

In a global program as broad and dynamic as CVE, differences in interpretation are inevitable. One area where these differences…

Before diving into ARP attacks, it’s important to understand how devices on a local network find and communicate with each other. Many…

Burp Suite Intruder is a built-in automation tool used to test the security of web applications. It works by repeatedly modifying request…

Windows systems don’t just “act weird” out of nowhere.

Simple guide to analyse HopHelper.exe using sandbox tools.