😉 Suscribete a mi canal de Youtube para ver todo lo relacionado con el Bug Bounty: https://www.youtube.com/@0xGorka

😉 Suscribete a mi canal de Youtube para ver todo lo relacionado con el Bug Bounty: https://www.youtube.com/@0xGorka

Learning how to hack or attack Active Directory is a key part of penetration testing as a vast majority of environments use it. While there…

In this post, I’ll walk through the exploitation process for the Hackable 2 vulnerable machine. This challenge highlights FTP…

When it matters and when it misleads

Every hackathon has its own rhythm — the rush of learning, the thrill of building, and the shared energy of a global community. MLH’s…

Who Will Come Out On Top?

Hello Guys , its been long time i have post so here with another walk through from letsdefend platform .

In today’s world, cybercrime isn’t just a hacker in a hoodie, it’s a billion-dollar industry, run like organized crime syndicates…

Every time you install an app, sign up for a service, or even visit a website, you’re faced with a familiar button “Agree”, But do you…

Dating apps have become a popular way for people to connect, find love, and build relationships. However..

Children are growing up in a digital forest, but not every tree bears fruit. Some whisper lies, others are hollow traps dressed in glitter. This is a plainspoken guide to the shadows lurking online —…

Have you ever logged out of your company’s email, only to realize you’re still signed into your internal chat application? This common…

At first, I started with Nmap port scanning using the following command:

TwoMillion is an easy Linux machine released by Hack The Box to celebrate 2,000,000 users. This machine recreates the original HTB…

For Code machine the initial foothold is gained by exploiting a Server-Side Template Injection (SSTI) vulnerability in a Flask web…

As an ethical hacker, I’ve learned that mindset is the real firewall between you and failure.  It’s not just about tools, exploits, or…

This post is about what I’ve been doing in the past week to continue improving and work towards finding my first bug!

During a routine bug bounty hunt, I stumbled upon an OAuth login flow behaving like it had a mind of its own. Two related quirks made me…