The Unfair Advantage in Modern Bug Bounty

Account Takeover via Email Change Token Parameter(newUid) Manipulation

Un caso real de cómo NO diseñar la seguridad de una aplicación

Who am i

Starting point with level 10 :

http://cybertalents.com/challenges/web/escape_202

Today I began expanding my knowledge in Ethical Hacking and Cybersecurity, focusing on how attackers operate and how organizations defend…

Command Injection Command Injection Nedir? Command Injection (Komut Enjeksiyonu), bir uygulamanın kullanıcıdan aldığı girdiyi yeterli doğrulama ve filtreleme yapmadan sistem kabuğuna (shell) …

Master Netcat for Bug Hunting: from banners and file transfers to reverse shells and firewall evasion.

Some boxes have one interesting thing. VulnNet: Active had a chain of them. Every step fed directly into the next, and by the end I had a…

Task 1: Introduction

Siber Güvenlik dünyasına adım atmak isteyen herkesin yolu bir noktada Kali Linux ile kesişir. Peki Kali Linux nedir? Neden Siber güvenlik…

Here you can find it RootMe

GreyNoise detects a coordinated surge in SonicWall reconnaissance. With over 84,000 scans, attackers are mapping VPNs for Akira and Fog ransomware strikes.

The landscape of vulnerability hunting has fundamentally shifted.

The dark web can be a rich source of intelligence, but only if you approach it with structure, discipline, and a clear toolkit.

Phone numbers are everywhere in investigations, from suspicious calls to fraud leads, but turning a simple digit string into real…

This will be a short list of tips and tricks for those who are going to attempt or are currently attempting the exam, based purely on my…

A Complete Roadmap for Beginners to Think, Hack and Defend Like a Pro

1. What it is (very simple, no jargon)

🟡 1. What it is (very simple definition)