Hey..,Guys!!!. I am here Stand for the Blog “DNS Resolutions: Hunting Live Targets..”

Posted by Yoshi Yamaguchi, Santiago Díaz, Maud Nalpas, Eiji Kitamura, DevRel team The Reporting API is an emerging web standard that pr...

What's Changed

Fixed goroutine leaks causing spike in memory uses by @tarunKoyalwar in #5112
Added -profile and -profile-list option to run template using template profile by @RamanaReddy0M in...

Opensource IDE For Exploring and Testing API's (lightweight alternative to Postman/Insomnia) - usebruno/bruno

SubDominator helps you discover subdomains associated with a target domain efficiently and with minimal impact for your Bug Bounty - RevoltSecurities/Subdominator

Learn how to use CodeQL for security research and improve your security research workflow.

Lambert Rosique and Jan Keller, Security Workflow Automation, and Diana Kramer, Alexandra Bowen and Andrew Cho, Privacy and Security Inciden...

Have you ever found yourself feeling stuck? Rafael de Carvalho shares critical steps toward moving in the right direction.

This post describes a case study of a recent LLM pentest engagement that allowed to exploit the LLM agent for remote code execution.

Contribute to ivision-research/burpnoscript development by creating an account on GitHub.

I recently worked on a Flutter-based application and learned that it is different from other hybrid frameworks like React Native or…

Posted by Steve Kafka and Khawaja Shams (Android Security and Privacy Team), and Mohet Saxena (Play Trust and Safety) A safe and trusted ...

Hello everyone👋

Welcome to the April edition of the ProjectDiscovery Community Newsletter. Spring is already in full swing, and with the season of new growth comes plenty of new updates from the PD team.

This month has seen exciting additions to Nuclei and its templates…

Change is in the air for the DAY[0] podcast! In this episode, we go into some behind the scenes info on the history of the podcast, how it's evolved, and what our plans are for the future.

Posted by Will Harris, Chrome Security Team Chromium's sandboxed process model defends well from malicious web content, but...

Answer all your questions about how to get involved in HackerOne's Ambassador World Cup!

As always read me for a cookie

It’s now been a month since we launched the new Cloud-based Burp Suite Enterprise Edition, and we’re taking a look at the benefits our users have seen so far.  Burp Suite Enterprise Edition in th

Introduction

In our last blog post, we delved into the inner workings of Lucee and took a look at the source code of Masa/Mura CMS, and the vastness of the potential attack surface struck us. It became evident that investing time in understanding the code…