picoCTF Web Exploitation: It is my Birthday

Information Disclosure in Version Control History

Information Disclosure in Error Messages

picoCTF Web Exploitation: More Cookies

You’ll see why I think External Programs are not worth it

Hi Guys, Welcome back to yet another article, Today, I want to walk you through one of the bugs I found while hunting on HackerOne. I was…

A Real-World Hook: The Coinbase Breach

Most PHP devs don’t get hacked because they’re bad coders. They get hacked because they assumed the defaults were enough.

In the rapidly evolving landscape of modern software, where applications form the backbone of businesses and daily life, the integrity and…

✅Introduction

When we talk about cyberattacks, many think of massive DDoS floods, network breaches, or ransomware.

In modern software development, ensuring the integrity and authenticity of your code is paramount. A robust method for achieving this is to…

When testing for command injection, you might notice something odd:

1. Stopped Waiting for “The Perfect Time”

Let’s be real: if you’re a Blue Teamer, you’ve probably woken up in a cold sweat wondering, “What new horror did the Red Team deploy while…

Researchers have identified a surge in credential theft operations driven by a Vietnamese-speaking threat group leveraging a Python-based…

After losing over $600,000.00 to fraudulent stock brokers who operated under the name “fxtradebit,” I found myself drowning in debt. However, I was fortunate enough to come across so reviews about a…

The Hook

Session hijacking is a type of cyber attack where hackers takes control of a user’s active session after the user has authenticated to a service. The goal of this attack is often to steal sensitive…

Sofía is at home, worried because her partner, Marcos, tells her he is working late. Marcos sends her a photo in which he appears serious…

Welcome to another Hack the Box exercise. In this blog post, I will show you how I owned the Fluffy machine on Hack the Box. Hack The Box…