Description : Vulnerability allow a authenticated user whith low privilages upload a malicious WAV file that could lead to remote arbitrary…

Comprehensive walkthrough of XSS exploitation techniques, from cookie theft to malicious redirection

Hello, my name is Singkhon. After completing the eJPT course, I would like to share my methods and approaches for solving each CTF problem…

Comprehensive walkthrough of SQL injection techniques, schema enumeration, data extraction, and hash cracking.

Every Active Directory lab I’ve done has taught me something new. My home lab taught me how to build a domain and tear it apart. The…

The Unfair Advantage in Modern Bug Bounty

Account Takeover via Email Change Token Parameter(newUid) Manipulation

Un caso real de cómo NO diseñar la seguridad de una aplicación

Who am i

Starting point with level 10 :

http://cybertalents.com/challenges/web/escape_202

Today I began expanding my knowledge in Ethical Hacking and Cybersecurity, focusing on how attackers operate and how organizations defend…

Command Injection Command Injection Nedir? Command Injection (Komut Enjeksiyonu), bir uygulamanın kullanıcıdan aldığı girdiyi yeterli doğrulama ve filtreleme yapmadan sistem kabuğuna (shell) …

Master Netcat for Bug Hunting: from banners and file transfers to reverse shells and firewall evasion.

Some boxes have one interesting thing. VulnNet: Active had a chain of them. Every step fed directly into the next, and by the end I had a…

Task 1: Introduction

Siber Güvenlik dünyasına adım atmak isteyen herkesin yolu bir noktada Kali Linux ile kesişir. Peki Kali Linux nedir? Neden Siber güvenlik…

Here you can find it RootMe

GreyNoise detects a coordinated surge in SonicWall reconnaissance. With over 84,000 scans, attackers are mapping VPNs for Akira and Fog ransomware strikes.

The landscape of vulnerability hunting has fundamentally shifted.