Uncover the latest on Storm-2372, a phishing campaign exploiting device code authentication to access high-value targets.

Explore CVE-2025-24865 and its critical impact on mySCADA's myPRO Manager. Unauthorized access poses severe security risks.

Hey, fellow bug hunters! Welcome to another exciting writeup in my bug bounty journey. My goal is to make these reports easy to understand…

Reconnaissance is a crucial phase in cybersecurity assessments, allowing ethical hackers and security professionals to gather information…

Sightless is an easy-difficulty Linux machine featuring a website for a company offering various services. Enumeration of the website…

*Note: This article was originally published by the author on May 27, 2020. It is republished here by the author for archival purposes…

Introduction

Learn the basics of cryptography and symmetric encryption.

This is a new chapter of my responsible disclosures to entities that have accidentally left unprotected data exposed in the cloud by…

Bug hunter adalah istilah yang digunakan untuk menyebut seseorang yang mencari dan mengidentifikasi bug atau masalah dalam perangkat lunak, aplikasi, atau sistem komputer. Mereka bertugas untuk…

2.7 billion IoT records leak, DOGE gets hacked, and Google works on new Android features to thwart scammers

Gain full visibility into your organization in less than an hour.

*Note: This article was originally published by the author on September 24, 2020. It is republished here by the author for archival…

Learn about active recon, web app attacks and privilege escalation.

Pourquoi j’ai quitté X et pourquoi vous devriez en faire autant.

Introduction

Hello Hackers, In this writeup I am going to discuss my recent finding on Samsung, like how I found the bug and as a award they awarded me…

Introduction

Hello, in this story, I will discuss how I discovered DOM XSS and Postmessage misconfiguration and escalated them to take-over the Zoho…

Learn how to find this bug by reading this blog