Description : Read user.txt and root.txt

Introduction

When I start hunting on a new target, I turn Burp’s proxy on, then start using the target’s app/platform as if I was a normal user.

Imagine you’re scrolling on your phone, chill mode on. A site asks you to go fullscreen — maybe it’s a video, maybe it’s a game. You tap…

Hi Everyone,

𝘏𝘦𝘭𝘭𝘰, 𝘐’𝘮 𝐇𝒐𝐬𝐬𝐚𝐦 𝐌𝒐𝐬𝐭𝐚𝐟𝐚, 𝘬𝘯𝘰𝘸𝘯 𝘪𝘯 𝘵𝘩𝘦 𝘉𝘶𝘨 𝘏𝘶𝘯𝘵𝘪𝘯𝘨 𝘤𝘰𝘮𝘮𝘶𝘯𝘪𝘵𝘺 𝘢𝘴 𝑽𝒊𝒑𝒆𝒓. 𝘐…

TL;DR — I found an IDOR bug that let me sneak my user into another tenant’s department, even though cross-tenant access was supposed to be…

Understanding Virtual DOM, Props, State, and Component Control Patterns

Makro Nedir?

Building a Bulletproof Home Lab: Redundant Networks, Kasm, and Tailscale on Zima Board

Hi everyone, I will share with you the solution of CTF room, called “Easy Peasy” step by step on the tryhackme platform. The room is…

The DAD Triad

)

One assumption cost me days of work — here’s how I learned to pivot.

Digital transformation has swept through the region with an intensity that surprised both insiders and outsiders. Mobile banking, booming…

Securitization has always been an act of financial alchemy. It emerged as a mechanism to transform mortgage loans into tradable securities…

Phishing attacks have evolved far beyond simple “fake login” emails. Modern campaigns exploit trusted cloud services, advanced obfuscation…

Executive Summary

GZR Observer Daily — Sep 28, 2025 UK Pledges $2B Loan Guarantee to Jaguar Land Rover Amid Economic Uncertainty Geopolitical Tensions And Military Escalations Russia launched a major drone and …

By pmonthacker