The New Frontier of Digital Trust

Let’s get right to the point! The idea of a perfectly secure and always-on web application is a myth. Every system, regardless of how…

So I’ve been messing around with honeypots lately, and Cowrie turned out to be way cooler than I expected. It’s an SSH/Telnet honeypot that…

Jose Diaz | LinkedIn

A DOM-based XSS vulnerability was found where the app writes URL parameters (location.search) into the page using document.write without…

Author: Vaibhav Mulak  Machine:hacksudo: 2 (HackDudo)

Planning HackTheBox Walkthrough — Grafana Exploitation, Docker Escape & Crontab Privilege Escalation

HackTheBox Artificial Walkthrough: Exploiting TensorFlow RCE for Web Shells and Linux Privilege Escalation

1. Resumen

Kerbrute is a Go-based utility commonly used by security pros to test Kerberos authentication. In this article, I have demonstrated how to…

A stored XSS vulnerability was discovered in a comment section that saved user input directly to the database and displayed it on the page…

By SmaRTy Saini | CyberHealth IT | Real Stories. No Hype.

From Manual Searching to a Systematic Leak Discovery Engine

بسم الله و الصلاة و السلام على رسول الله الحمد لله الذي علم بالقلم علم الإنسان ما لم يعلم و الصلاة و السلام على خير معلم الناس الخير محمد

Walkthrough for “Devvortex” on Hack The Box

TL;DR: We all build auth.js. We all include the reset_token email link. And we all know it’s a single point of failure. If your user loses…

Aryavhir Koul

Initial Access via log poisoning, Privilege Escalation to sadm via rlogin and sudo nano to root in tmux session

For years, my professional life revolved around business strategy, marketing, and leadership -helping tech companies grow, align teams, and…

Initial Access with Webshell deployment via Gitea, RDP as gale.dekarios from mRemoteNG config and PDF24 CVE for local privesc