The Hugging Face Attack Has Made Agentic AI Red Teaming a red hot career ..

Exploiting Unsafe YAML Deserialization and Credential Exposure for Privilege Escalation

A walkthrough of TryHackMe’s “Packed Light” — Easy, 60 points, Forensics category — from the Hacker Holidays event at the Byte Lotus Hotel.

After download the file we open it in the wireshark:

A practical guide to how login mechanisms get exploited in the wild

Hello Everyone,

Triage teams close it as Low. The attacker reopens it as Critical. Here’s the gap.

The $8 Device that can Steal Passwords, Bypass firewalls and Compromise any Computer How it works and How to Defend

Hello world, this write-up covers an interesting IDOR vulnerability I discovered during a web application security assessment. What made…

A beginner's walkthrough of finding a blind stored XSS bug on a bug bounty program, proving impact against triage, and earning a second payout after the fix.

Every penetration tester and bug bounty hunter eventually runs into the same problem.

Unsafe YAML Deserialization & Process-Based Credential Leakage

Difficulty: Easy Category: AI/LLM security

Even the jukebox at this beach bar takes requests, apparently any kind of request. Turns out that includes requests it really, really…

Introduction

A code-first hunt through Mozilla’s open-source editorial backend where an existing SSRF guard was wired to exactly one endpoint, and the…

Hello Security People ! Today I finished a module from the CPTS certificate called SQL Injection Fundamentals and it has a skills…

Complete Cheat Sheet for Bug Bounty & Pentesting

(“Every Android App Has a Blueprint… Learn to Read It”)