Content Security Policy (CSP) is a powerful web security standard designed to prevent cross-site scripting (XSS), clickjacking, and other…

Preparing for a Penetration Test

Disclaimer: Writeup ini dibuat untuk tujuan edukasi. Semua aktivitas dilakukan di lingkungan lab yang terkontrol dan disediakan oleh…

This observation helped confirm that the issue was not limited to a single device and contributed to extending CVE-2024-45275

Authentication mechanisms are a critical component of web application security. However, weak credential management and insufficient…

Disclaimer: Writeup ini dibuat untuk tujuan edukasi. Semua aktivitas dilakukan di lingkungan lab yang terkontrol dan disediakan oleh…

1️. Introduction

1. Introduction

Introduction

Every day, thousands of companies get attacked by cybercriminals… banks, hospitals, social media platforms, and even governments. Behind…

How keeping a browser tab open for 2.5 months helped me bypass a strict WAF using WebKit and String Concatenation.

Hey there! 😁

A lot of people in bug bounty keep reading the same stuff.

Finding information on the Tor network is very different from searching the regular internet. Traditional search engines rely on open…

OS Command Injection is a security vulnerability where an attacker can execute operating system (OS) commands on a server through a…

This writeup documents the exploitation of the CCTV machine from Hack The Box — Season 10.
Grab a coffee ☕ and let’s dive in.

I wanted to document my journey from Day 1 of learning on TryHackMe as I thought it would be a good idea to see where I would reach from…

The Bug Bounty Trick for Finding Valid Users 🐞💻

Hello everyone ,
to day we will solve a simple forensics ctf

Every day, thousands of users lose access to their Instagram accounts.