Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

How Invisible Characters, RTL Tricks, and Homoglyphs Can Break Web Logic and Lead to Critical Bugs

How Source Maps Can Reveal Secrets, Admin Panels, and Internal Logic

How Reading JavaScript Can Lead to API Keys, JWTs, Private Endpoints, and Vulnerability Gold

This blog breaks down the OAuth 2.0 framework using a real-world example. Learn how secure login works when you use options like “Continue…

A practical guide to understanding and securing the foundational layer of modern hardware

Detection & Countermeasures

Hackers don’t need a wrench to hijack your ride.

Hi Hackers :)

What is Open Redirect?

I couldn’t find a walkthrough with all the days together, so writing this XD. Oof this is going to be A LOOONNG one.

"AI isn’t just defending us anymore — it’s attacking. A new generation of malware, designed and trained by machines, is breaching systems faster than humans can respond." Until recently, malware was…

Email spoofing is one of the most serious cyber threats today. By modifying the “From” field in an email header, attackers can impersonate…

Oaps!!! Another Attack Surface…

Non-Members: Read Here

In the modern digital age, keeping children safe online is one of the biggest fears for parents. As more and more people use smartphones…

Can you find all the basic persistence mechanisms in this Linux endpoint?

Web Exploitation

Application Name: Vulnerable Bank Application Developer: Al-Amir Badmus (Senior Application Engineer) Assessor: Akanbi Oluwakunle Johnson…

Author: Shoaib Bin Rashid | R3D_XplOiT