SQL Injection (SQLi) is a type of attack in which an attacker manipulates database queries by injecting malicious input into an…

How I discovered an arbitrary file read vulnerability using a malicious archive upload and earned one of the highest bounties in my career.

In the first three parts of this series, we’ve gone from the basics of host discovery (Part 1), to sneaky firewall evasion tricks (Part 2)…

🚀 The Future of AI in Penetration Testing: From Assistant to Autonomous Hacker Artificial Intelligence (AI) is reshaping every industry, and cybersecurity is no exception. What used to be manual …

On September 8, 2025, one of the most significant security breaches in the history of npm (Node Package Manager) shook the open-source…

Platform: PicoCTF
Challenge: vault-door-6
Category: Reverse Engineering

In this article, I’ll walk you through a controlled penetration testing exercise I performed in my isolated lab. The target was a…

Phishing datasets miss full-page content and go stale fast, so models fail in the wild.

Her sızma testinin ilk adımı, hedef sistemi tanımaktır. Bu CTF’te, bir web sunucusunun derinliklerine inecek, gizli dosyaları keşfedecek ve…

Step-by-step solution to W1seGuy while breaking down the logic of XOR and key recovery.

Remote Shell Walkthrough on Kioptrix & Blue Windows (Lab Practice) TL;DR: In a controlled lab setup, I successfully gained a remote shell on two vulnerable machines: Kioptrix (Linux) and Blue Windows …

You can get this machine from tryhackme or vulnhub.

Hi there over the last few years I have been closely studying the behaviour of celebrity scammers and imposters after losing a whopping $50, 000 to a relatively sophisticated approach by someone …

Most people think insanity is doing the same thing over and over and expecting different results. But isn’t that exactly what we’ve done…

Okay, real talk. I just stumbled down a rabbit hole of something called eye-tracking, and my brain is completely buzzing. I’m no expert…

بسم الله الرحمن الرحيم
.والصلاة والسلام على سيدنا محمد أشرف الخلق والمرسلين

Nowadays, hackers don’t always need advanced exploits to learn about us. Using OSINT, they can collect personal details from our social…

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Tired of hunting manually? Let automation do the heavy lifting. 🚀 Here’s a quick workflow to find XSS, SQLi, SSRF, Open Redirects and more…

Week 37: Sept 8–14, 2025
 
 Hey, I am Rohitkumar Jha (Masters in Computer Science, specializing in Computer Security and Information…