ShinyHunters hackers leak 2 million records from Dutch telecom Odido after ransom refusal, claiming up to 21 million customer records were stolen in the breach.

Follow us on all social media @Hackread

Lab: Unprotected admin functionality

Introduction: The Graveyard of Almost-Pro Hunters

Introduction: The Hunter Who Found Everything and Earned Nothing

OWASP BLT is becoming an increasingly popular platform for bug reporting and remediation with that we also need an on-the-go setup and for…

Denoscription : Vulnerability allow a authenticated user whith low privilages upload a malicious WAV file that could lead to remote arbitrary…

Comprehensive walkthrough of XSS exploitation techniques, from cookie theft to malicious redirection

Hello, my name is Singkhon. After completing the eJPT course, I would like to share my methods and approaches for solving each CTF problem…

Comprehensive walkthrough of SQL injection techniques, schema enumeration, data extraction, and hash cracking.

Every Active Directory lab I’ve done has taught me something new. My home lab taught me how to build a domain and tear it apart. The…

The Unfair Advantage in Modern Bug Bounty

Account Takeover via Email Change Token Parameter(newUid) Manipulation

Un caso real de cómo NO diseñar la seguridad de una aplicación

Who am i

Starting point with level 10 :

http://cybertalents.com/challenges/web/escape_202

Today I began expanding my knowledge in Ethical Hacking and Cybersecurity, focusing on how attackers operate and how organizations defend…

Command Injection Command Injection Nedir? Command Injection (Komut Enjeksiyonu), bir uygulamanın kullanıcıdan aldığı girdiyi yeterli doğrulama ve filtreleme yapmadan sistem kabuğuna (shell) …

Master Netcat for Bug Hunting: from banners and file transfers to reverse shells and firewall evasion.

Some boxes have one interesting thing. VulnNet: Active had a chain of them. Every step fed directly into the next, and by the end I had a…