You’ve learned about if/else statements and understand how to use them for decision-making.

Ever wanted to make your website do cool stuff like change colors or show messages when you click a button? That’s where the DOM (Document…

Variables are one of the fundamental building blocks of programming, and JavaScript is no exception. They act as containers that store data…

HTMLSmuggler - JS payload generator for IDS bypass and payload delivery via HTML smuggling.

Practical Techniques to Increase your Chances of Finding Valid Bug/Leaks in Javascript Files

Common Mistakes and Practical Techniques to Tackle them to Find Valid Bugs/Leaks in JS Files

Common Mistakes and Practical Techniques to Tackle them to Find Valid Bugs/Leaks in JS Files

Hello everyone! Today, I’m excited to share my detailed methodology for uncovering sensitive data hidden within JavaScript (JS) files…

IP stands for information protocol it work to send or recieve the data packet form one device to another ..

NPM malware detection: A hands-on guide to spotting and stopping supply-chain attacks using real-world scanning scripts and IOC analysis.

In modern web applications, backend logic often hides behind layers of UI workflows and API routing. But sometimes, the most impactful…

How I Built a One‑Click Bookmarklet Tool to Spot Input Fields & Errors

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

The JS#SMUGGLER campaign uses "Junk Code" JavaScript and fileless PowerShell executed via mshta.exe to bypass EDR. This multi-stage attack silently installs the NetSupport RAT.

JS Analyzer A powerful Burp Suite extension for JavaScript static analysis. Extracts API endpoints, URLs, secrets, and email addresses from JavaScript files with intelligent noise filtering. The g…

Understanding the Risks of Webcam Access in Web Applications: An Ethical Hacking Perspective

Quite interesting room that challenges your basic reconnaissance abilities. At first i tried simply do checkmate and got embarrassing…