Introduction

Red Teaming is a simulation of a real attacker’s activity that is based on the most up-to-date knowledge regarding risks that are relevant…

3,553 stars in a single day.

During a recent web penetration test, I was testing an auto-suggestion search feature. Like clockwork, I threw in a classic XSS payload…

Free Link 🎈

Hello Hackers! 👋

How a simple authorization flaw in a popular email marketing platform could have exposed sensitive campaign data across thousands of…

If you’re a beginner looking at smart contract auditing and wondering whether the opportunity has already passed, this article is for you…

‏ ‏ ‏Imagine receiving a refund for an order you never purchased. ‏ ‏No stolen credentials. ‏No payment bypass. ‏Just a system that failed…

In Part 1, we explored Reflected Cross-Site Scripting (XSS) and how unsanitized user input can be immediately reflected and executed in a…

What to do when everyone sees a way except you?

CTF Challenge — OSINT

For years, organizations treated authentication as the ultimate security checkpoint.

And my way through it

Automating Recon with a Python CLI

💘 ❣️ My Dearest Hacker, 🍒 Spread the love this Valentine’s Day with CupidCards — the web app that lets you create personalised Valentine…

In this walkthrough, I’ll explain the exact step-by-step process I followed to solve this CTF machine and capture all the flags.

This is an easy-rated room featuring a web challenge.