| Sun, 09 Aug 2026 22:50:55 GMT |
What Does “AI Security� Actually Mean? |
security |
Yes |
Yes |
| Sun, 09 Aug 2026 23:26:14 GMT |
Teaching AI Safely: A Practical Guide for Non-Technical Teams |
cybersecurity, information-technology |
Yes |
Yes |
| Sun, 09 Aug 2026 23:09:00 GMT |
Building a Wazuh Home Lab: Sysmon, Slack Alerting, Active Respons... |
cybersecurity |
Yes |
Yes |
| Sun, 09 Aug 2026 23:07:18 GMT |
Akıllı Süpürgeniz Hacklenebilir mi? |
cybersecurity, hacking, ethical-hacking |
Yes |
Yes |
| Sun, 09 Aug 2026 17:53:05 GMT |
The 2 AM Query That Started Rowly |
security, penetration-testing |
|
Yes |
| Sun, 09 Aug 2026 03:22:28 GMT |
Camera Glasses Shouldn’t Just Be Taken Off Kmart Shelves. They ... |
information-technology |
|
Yes |
| Sun, 09 Aug 2026 07:58:54 GMT |
How I Prioritize Hundreds of Subdomains During Bug Bounty Recon |
bug-bounty |
|
Yes |
| Sun, 09 Aug 2026 17:15:38 GMT |
One DNS Query Maps a Company’s Entire SaaS Stack |
bug-bounty |
|
Yes |
| Sun, 09 Aug 2026 18:38:42 GMT |
INE eJPT — Assessment Methodologies: Footprinting and Scanning... |
penetration-testing |
|
Yes |
| Sun, 09 Aug 2026 08:39:51 GMT |
OverTheWire: Bandit Level 13 → 14 Walkthrough (Updated 2026) |
penetration-testing |
|
Yes |
| Sun, 09 Aug 2026 21:54:39 GMT |
Entry-Level Cybersecurity Jobs in Nigeria: Roles, Skills, Salary,... |
ethical-hacking |
|
Yes |
| Sun, 09 Aug 2026 08:51:18 GMT |
HTB:Authority — Write-up |
penetration-testing |
|
Yes |
| Sun, 09 Aug 2026 09:11:30 GMT |
@ |
infosec |
|
Yes |
| Sun, 09 Aug 2026 04:16:26 GMT |
Authentication Security Testing: What I Learned From Breaking the... |
web-security |
|
Yes |
| Sun, 09 Aug 2026 18:04:19 GMT |
Software Bug Tracking: Transforming Errors Into Superior Software... |
bugs |
|
Yes |
| Sun, 09 Aug 2026 16:00:33 GMT |
20 Google Searches Every Cybersecurity Student Should Know |
ethical-hacking |
|
Yes |
| Sun, 09 Aug 2026 19:01:13 GMT |
Ain Shams CTF 2026(CYBER CUP) Writeup |
web-security |
|
Yes |
| Sun, 09 Aug 2026 18:41:14 GMT |
How to Ace the Modern Cybersecurity Interview: SIEM, GRC, and Han... |
hacking |
|
Yes |
| Sun, 09 Aug 2026 13:52:53 GMT |
8 Free AI Courses That Are Better Than Most Paid Ones |
information-technology |
|
Yes |
| Sun, 09 Aug 2026 11:00:13 GMT |
Indirect Prompt Injection: What LLM Bounty Triagers Actually Rewa... |
bug-bounty |
|
Yes |
| Sun, 09 Aug 2026 23:01:36 GMT |
The Hidden Complexity: Building a GRC Means Reinventing a Lot of ... |
cybersecurity, information-security |
|
Yes |
| Sun, 09 Aug 2026 22:03:26 GMT |
Remote Cybersecurity Jobs You Can Apply For in 2026: Roles, Skill... |
cybersecurity |
|
Yes |
| Sun, 09 Aug 2026 22:10:22 GMT |
Harness, Runtime, and Managed Knowledge Base: Three Layers Everyo... |
security |
|
Yes |
| Sun, 09 Aug 2026 16:02:50 GMT |
Business Email Compromise Attack Mechanics |
security |
|
Yes |
| Sun, 09 Aug 2026 18:07:25 GMT |
Facility Security in the Defence Industry: Beyond Physical Protec... |
information-security |
|
Yes |
| Sun, 09 Aug 2026 20:14:05 GMT |
IDOR via Comma-Injection: How Concatenating Two IDs Leaked Cross-... |
bug-bounty, bug-bounty-tips, pentesting |
|
Yes |
| Sun, 09 Aug 2026 14:55:51 GMT |
I Googled Myself and Regretted It Immediately |
cyber-security-awareness |
|
Yes |
| Sun, 09 Aug 2026 03:32:48 GMT |
I Wear You All Over My Soul |
vulnerability |
|
Yes |
| Sun, 09 Aug 2026 09:12:25 GMT |
Taking Advantage of SQLi Vulnerability in the Login Form to Bypas... |
application-security |
|
Yes |
| Sun, 09 Aug 2026 23:02:26 GMT |
How AI Agents Can Now Hack Your Cloud Infrastructure (Full Report... |
cybersecurity |
|
Yes |
| Sun, 09 Aug 2026 19:37:25 GMT |
How Many Wings Did We Clip Before They Learned to Fly? |
security |
|
Yes |
| Sun, 09 Aug 2026 21:20:42 GMT |
How to Become a Cybersecurity Analyst in Nigeria: A Step-by-Step ... |
ethical-hacking |
|
Yes |
| Sun, 09 Aug 2026 09:50:04 GMT |
How I Chained an Unauthenticated OAuth Registration Endpoint into... |
bug-bounty |
|
Yes |
| Sun, 09 Aug 2026 14:45:17 GMT |
The 10 Ethical Hacking Terms You Should Know Before You Start |
information-security |
|
Yes |
| Sun, 09 Aug 2026 14:51:49 GMT |
The Biggest Mistake Bug Hunters Make After Finding an Open Redire... |
penetration-testing, infosec |
|
Yes |
| Sun, 09 Aug 2026 08:55:08 GMT |
Chapter 4 |
information-technology |
|
Yes |
| Sun, 09 Aug 2026 05:56:06 GMT |
The Hugging Face AI Agent Intrusion: What Actually Happened? — ... |
pentesting |
|
Yes |
| Sun, 09 Aug 2026 19:47:16 GMT |
Hunting Ghosts in the WMI Repository: After Hours| Hacker Holida... |
penetration-testing, ethical-hacking |
|
Yes |
| Sun, 09 Aug 2026 11:16:40 GMT |
Underbelly |
vulnerability |
|
Yes |
| Sun, 09 Aug 2026 12:20:49 GMT |
The Difficulty of Putting My Deepest Feelings into Words |
vulnerability |
|
Yes |
| Sun, 09 Aug 2026 07:13:11 GMT |
Grafana Security Alert | CVE-2026–15583 & CVE-2026–21723 Ex... |
bug-bounty |
|
Yes |
| Sun, 09 Aug 2026 10:21:01 GMT |
Build Your Cybersecurity Career with Independence Day Special Off... |
cyber-security-awareness |
|
Yes |
| Sun, 09 Aug 2026 22:12:40 GMT |
THM | Management Wants A Word | Hacker Holidays 2026 | HARD |... |
cybersecurity |
|
Yes |
| Sun, 09 Aug 2026 11:44:10 GMT |
Wat te doen als ik gehackt ben? |
cyber-security-awareness |
|
Yes |
| Sun, 09 Aug 2026 22:12:59 GMT |
From Exposed PUT Requests to chkrootkit Root: A Complete Walkthro... |
cybersecurity, hacking |
|
Yes |
| Sun, 09 Aug 2026 05:57:06 GMT |
The Hugging Face AI Agent Intrusion: What Actually Happened? Part... |
pentesting |
|
Yes |
| Sun, 09 Aug 2026 18:06:01 GMT |
Passkeys actually work. Then, why is adoption still terrible? |
infosec |
|
Yes |
| Sun, 09 Aug 2026 12:24:13 GMT |
Uygulamalı Layer 2 Saldırıları: Layer2PoC #2 : STP Manipülas... |
penetration-testing, ethical-hacking |
|
Yes |
| Sun, 09 Aug 2026 12:59:28 GMT |
SMB and SMTP Enumeration Using Different Tools |
cyber-security-awareness |
|
Yes |
| Sun, 09 Aug 2026 01:10:38 GMT |
The GenAI Security Paradox — Intelligence vs. Determinism |
application-security |
|
Yes |
| Sun, 09 Aug 2026 16:11:52 GMT |
Hardening against CSV Injection in Umbraco |
penetration-testing, hacking |
|
Yes |
| Sun, 09 Aug 2026 04:06:01 GMT |
Enterprise Security Restructuring in the Age of AI-Discovered Vul... |
application-security |
|
Yes |
| Sun, 09 Aug 2026 01:20:32 GMT |
RCE in 2026 Doesn’t Look Like RCE in 2020. Here’s What Actual... |
infosec, bug-bounty-tips, rce |
|
Yes |
| Sun, 09 Aug 2026 11:42:05 GMT |
The Agentic AI Controls That Actually Matter — Part 2 |
information-security |
|
Yes |
| Sun, 09 Aug 2026 04:51:19 GMT |
India’s Next Space Revolution Isn’t About Rockets. It’s Abo... |
information-technology |
|
Yes |
| Sun, 09 Aug 2026 09:53:50 GMT |
I Built a Zero Trust Network for My Homelab Using NetBird |
information-security |
|
Yes |
| Sun, 09 Aug 2026 18:59:26 GMT |
Web Application Penetration Testing CTF 1 |
hacking |
|
Yes |
| Sun, 09 Aug 2026 00:18:53 GMT |
The Silent Co-Founder in Every Founder Story |
information-technology |
|
Yes |
| Sun, 09 Aug 2026 06:38:19 GMT |
How I Escalated Privileges by Manipulating a Client-Side Permissi... |
bug-bounty-tips |
|
Yes |
| Sun, 09 Aug 2026 16:36:00 GMT |
RepoJacking: How 5 Unclaimed GitHub Usernames Enabled RCE on Self... |
bug-bounty, infosec |
|
Yes |
| Sun, 09 Aug 2026 22:55:15 GMT |
CTF Writeup: bilesenlerarası (6. BayrakSende CTF) |
cybersecurity |
|
Yes |
| Sun, 09 Aug 2026 05:30:33 GMT |
The Biggest Security Lie Developers Still Believe |
application-security |
|
Yes |
| Sun, 09 Aug 2026 12:22:53 GMT |
Vulnyex — Network Writeup |
pentesting |
|
Yes |
| Sun, 09 Aug 2026 12:23:50 GMT |
The Principle of Least Privilege Was Written for Humans. AI Agent... |
information-security |
|
Yes |
| Sun, 09 Aug 2026 21:22:55 GMT |
How I Use AI as a Bug Bounty Hunter — Part 1: My Real Setup |
bug-bounty-tips |
|
Yes |
| Sun, 09 Aug 2026 10:09:13 GMT |
The Paper Documents Most Businesses Could Replace With a Single Q... |
file-upload |
|
Yes |
| Sun, 09 Aug 2026 16:50:17 GMT |
The 50-Day Patch Window Is Dead |
information-security, ethical-hacking |
|
Yes |
| Sun, 09 Aug 2026 04:56:13 GMT |
Spring AI — SpEL Injection Leading to Remote Code Execution (CV... |
cve |
|
Yes |
| Sun, 09 Aug 2026 21:23:09 GMT |
24/7/365 Cyber Security Operations Center (CSOC) - At Smatchoiceh... |
hacking, cyber-security-awareness |
|
Yes |
| Sun, 09 Aug 2026 17:26:20 GMT |
My Experience Passing the ISC2 Certified in Cybersecurity (CC) Ex... |
cyber-security-awareness |
|
Yes |
| Sun, 09 Aug 2026 11:31:01 GMT |
Why Your Best XSS Is on a Param You Can’t See |
bug-bounty, infosec |
|
Yes |
| Sun, 09 Aug 2026 14:47:39 GMT |
Small Business Technology News This Week: AI Shopping Searches Su... |
information-technology |
|
Yes |
| Sun, 09 Aug 2026 20:01:23 GMT |
Attack and Security Series: Episode 4 |
security |
|
Yes |
| Sun, 09 Aug 2026 20:06:01 GMT |
Search for vulnerabilities in Convex |
security |
|
Yes |
| Sun, 09 Aug 2026 16:04:35 GMT |
Graphite: The Israeli Spyware That Can Hack Your Phone Without Yo... |
hacking |
|
Yes |
| Sun, 09 Aug 2026 19:30:36 GMT |
Slicing Through Bytecode with an AI Agent |
pentesting |
|
Yes |
| Sun, 09 Aug 2026 22:32:56 GMT |
Take Heart |
vulnerability |
|
Yes |
| Sun, 09 Aug 2026 12:01:02 GMT |
Breaking Out of a Privileged Docker Container Using cgroups (rele... |
penetration-testing |
|
Yes |
| Sun, 09 Aug 2026 15:06:01 GMT |
I Scanned My Home Network. Then I Found Devices I Forgot Existed. |
hacking |
|
Yes |
| Sun, 09 Aug 2026 12:09:12 GMT |
I Built an Automated Intrusion Detection System Using Python, ipt... |
infosec |
|
Yes |
| Sun, 09 Aug 2026 12:16:07 GMT |
How a Floating-Point Error Becomes a Browser Exploit |
information-security |
|
Yes |
| Sun, 09 Aug 2026 19:06:17 GMT |
The Architecture of the Unseen: Navigating the Watershed of 2026 |
cyber-security-awareness |
|
Yes |
| Sun, 09 Aug 2026 09:54:53 GMT |
Unauthenticated Mass Data Deletion: When DELETE Has No Auth Check |
bug-bounty |
|
Yes |
| Sun, 09 Aug 2026 08:51:36 GMT |
There is a difference between privacy and pretending. |
vulnerability |
|
Yes |
| Sun, 09 Aug 2026 17:58:23 GMT |
I Spent 24 Hours Using Only Free Cybersecurity Tools |
hacking, information-security |
|
Yes |
| Sun, 09 Aug 2026 14:49:17 GMT |
Hacking, Virtual Machines, Linux, and Networking: A Beginner’s ... |
ethical-hacking |
|
Yes |
| Sun, 09 Aug 2026 18:20:11 GMT |
I Took Over Someone’s Subdomain and Put a Cat On It |
ethical-hacking, subdomain-takeover |
|
Yes |
| Sun, 09 Aug 2026 16:57:23 GMT |
AI & Cyber Security Awareness Programme Empowers Students Across ... |
cyber-security-awareness |
|
Yes |
| Sun, 09 Aug 2026 21:00:10 GMT |
Writing Your First PIC Shellcode with Crystal Palace |
hacking, infosec, pentesting |
|
Yes |
| Sun, 09 Aug 2026 18:17:59 GMT |
Foundation — Identity, Networking & Secrets |
security |
|
Yes |
| Sun, 09 Aug 2026 14:05:10 GMT |
How Artificial Intelligence Is Changing the Way Businesses Operat... |
information-technology |
|
Yes |
| Sun, 09 Aug 2026 15:38:40 GMT |
Why Your Login Response Time Is a Security Leak |
security |
|
Yes |
| Sun, 09 Aug 2026 20:56:24 GMT |
You Can Outsource the Service, Not the Risk: Rethinking Third-Par... |
cyber-security-awareness |
|
Yes |
| Sun, 09 Aug 2026 08:59:43 GMT |
What if Petya and MEMZ were to combine and make a new malware? |
information-technology |
|
Yes |
| Sun, 09 Aug 2026 17:09:18 GMT |
Why Did a USB Device Connect to My Windows PC When I Wasn’t Usi... |
information-security |
|
Yes |
| Sun, 09 Aug 2026 21:29:15 GMT |
AI Agents Have Permissions Too: The New Privilege Escalation Prob... |
cyber-security-awareness |
|
Yes |
| Sun, 09 Aug 2026 13:02:35 GMT |
The Protocol Every Hacker Should Learn Before Touching Burp Suite |
bug-bounty, ethical-hacking |
|
Yes |
| Sun, 09 Aug 2026 11:14:19 GMT |
I Want to Love, But I’m Scared to Let Anyone In |
vulnerability |
|
Yes |
| Sun, 09 Aug 2026 05:56:55 GMT |
Offensive Active Directory: 12 Hands-On Techniques Every Red Team... |
vulnerability |
|
Yes |
| Sun, 09 Aug 2026 07:56:00 GMT |
From an Exposed Configuration File to Root Shell — RatCTF Write... |
penetration-testing |
|
Yes |
| Sun, 09 Aug 2026 11:37:48 GMT |
XSS (Çapraz Site Komut Dosyası Çalıştırma) |
xss-attack, xss-vulnerability |
|
Yes |
| Sun, 09 Aug 2026 14:17:03 GMT |
Why Your Biggest Attack Surface Might Be a Phone Call |
information-technology |
|
Yes |
| Sun, 09 Aug 2026 09:33:18 GMT |
OWASP Top 10: A05:2025(CWE-89) SQL Injection |
infosec, web-security |
|
Yes |
| Sun, 09 Aug 2026 08:12:29 GMT |
Deep Dive: OIDC & SAML Implementation + SQL Injection & XSS Harde... |
xss-attack |
|
Yes |
| Tue, 02 Jun 2026 19:48:50 GMT |
From False Positive to Hall of Fame: Exploiting Web Cache Poisoni... |
web-cache-poisoning |
|
|
| Mon, 27 Jul 2026 19:32:54 GMT |
Brew Bank Official Writeup | EYCC CTF |
lfi |
|
|
| Thu, 28 May 2026 07:15:06 GMT |
¡Únete y hazte con uno de los más de 400 premios! |
bounty-program |
|
|
| Tue, 14 Apr 2026 13:07:05 GMT |
My “Gemini� Is Named Mike |
dorks |
|
|
| Tue, 26 May 2026 23:44:37 GMT |
Intigriti May 2026 Challenge: XSS via Stored Payload & SCA Shield... |
xss-bypass |
|
|
| Thu, 06 Aug 2026 12:18:49 GMT |
How a Single Unauthenticated GraphQL Request Compromised Mozilla ... |
hackerone, bug-bounty-hunter |
|
|
| Mon, 06 Apr 2026 21:45:53 GMT |
Cookie(Çerez) Türleri ve Pentest Açısından Önemi |
web-pentest |
|
|
| Sun, 02 Aug 2026 14:32:52 GMT |
Benefits of VAPT for Modern Businesses |
vapt |
|
|
| Thu, 11 Jun 2026 05:26:16 GMT |
START HERE, MANIFESTO |
dorks |
|
|
| Thu, 23 Jul 2026 00:27:46 GMT |
Bug Bounty Automation — Elite Recon Pipeline + bonus Script |
recon |
|
|
| Sat, 08 Aug 2026 16:14:39 GMT |
(BAC)Insecure direct object references |
web-security, bug-bounty-writeup |
|
|
| Sat, 18 Jul 2026 14:27:22 GMT |
From Git Rebase to Remote Code Execution: An Unpatched Argument I... |
remote-code-execution |
|
|
| Sun, 02 Aug 2026 12:36:24 GMT |
Complimentary (THM) Tryhackme Walkthrough Hacker Holidays Day 3 |
information-disclosure |
|
|
| Tue, 28 Jul 2026 08:23:06 GMT |
[CVE-2026–56139] Apache Camel Undertow Component — Sensitiv... |
exploit |
|
|
| Mon, 29 Jun 2026 04:40:40 GMT |
We Stopped Vulnerable Code from Reaching Production with Snyk. He... |
vulnerability-scanning |
|
|
| Thu, 06 Aug 2026 17:43:56 GMT |
Understanding XSS: From Vulnerability to Prevention |
xss-attack |
|
|
| Sun, 12 Jul 2026 01:21:50 GMT |
XSS as a Password Stealer : A very overlooked XSS attack vector |
cross-site-scripting |
|
|
| Wed, 15 Jul 2026 11:30:22 GMT |
TryHackMe | Google Dorking |
google-dorking |
|
|
| Sat, 25 Jul 2026 22:43:16 GMT |
What Every Developer Should Know About IDOR |
idor |
|
|
| Fri, 07 Aug 2026 17:23:58 GMT |
Part II: The Case for Disposable Code |
cve |
|
|
| Fri, 12 Jun 2026 21:45:49 GMT |
TryHackMe Walkthrough: Support |
local-file-inclusion |
|
|
| Wed, 13 May 2026 23:11:19 GMT |
The Lethal Trifecta: How AI Agents With Tool Access Turn Prompt I... |
cyber-sec |
|
|
| Thu, 21 May 2026 15:16:28 GMT |
How to Bypass LinkedIn Commercial Use Limit in 2026 (Without Payi... |
google-dorking |
|
|
| Wed, 20 May 2026 20:47:25 GMT |
FINDING INFORMATION QUICKLY AND ACCURATELY WITH GOOGLE DORK |
google-dorking, google-dork, github-dorking |
|
|
| Fri, 31 Jul 2026 08:05:40 GMT |
Room 404 (THM) Tryhackme Walkthrough [Hacker Holidays : Day 2] |
information-disclosure |
|
|
| Sat, 20 Apr 2024 17:20:58 GMT |
TryHackMe — Brute Walkthrough | TheHiker |
log-poisoning |
|
|
| Fri, 07 Aug 2026 10:51:46 GMT |
DOM XSS using web messages |
xss-vulnerability |
|
|
| Sun, 19 Jul 2026 21:01:10 GMT |
The Secret Was Just One Folder Away |
information-disclosure, file-inclusion |
|
|
| Mon, 03 Aug 2026 16:00:47 GMT |
OWASP API #7 - Server Side Request Forgery (SSRF): When an API Be... |
ssrf |
|
|
| Sat, 08 Aug 2026 02:21:01 GMT |
Zypheron vs Nessus: Pentest Reporting Workspace vs Commercial Vul... |
pentesting |
|
|
| Sun, 15 Mar 2026 16:45:35 GMT |
Web Security Series #4 — Discovering Unauthorized Resources via... |
bug-bounty-hunting |
|
|
| Sat, 27 Jun 2026 03:05:54 GMT |
PortSwigger : Reflected XSS into a JavaScript String with Angle B... |
cross-site-scripting |
|
|
| Sun, 02 Aug 2026 22:05:11 GMT |
DorkinatorAI: a calmer way to start recon using AI |
bugbounty-writeup, bug-bounty-hunter |
|
|
| Mon, 06 Jul 2026 07:31:35 GMT |
From Testing File Uploads to Discovering Remote Code Execution (R... |
remote-code-execution |
|
|
| Sat, 20 Jun 2026 07:44:22 GMT |
Ağınız Dışarıdan Nasıl Görünüyor? Shodan İle Kurumsal ... |
shodan |
|
|
| Tue, 04 Aug 2026 11:31:01 GMT |
Finding Exposed Cloud Keys & Secrets |
bugcrowd |
|
|
| Mon, 25 May 2026 09:26:41 GMT |
Web Önbelleği Zehirlenmesi |
web-cache-poisoning |
|
|
| Fri, 24 Jan 2025 09:34:52 GMT |
A new Holistic temple opening InLeeds |
web-pentest |
|
|
| Wed, 01 Jul 2026 11:46:00 GMT |
Convierte acciones sencillas en recompensas reales |
bounty-program |
|
|
| Sat, 20 Jun 2026 11:04:15 GMT |
Scanning: The Second Stage of Penetration Testing — Turning Inf... |
vulnerability-scanning |
|
|
| Tue, 04 Aug 2026 01:01:01 GMT |
The Software Testing Vocabulary Problem That Makes Incident Inves... |
bugs |
|
|
| Fri, 07 Aug 2026 15:13:24 GMT |
wpwn proving Ground writeup | oscp prep/lab | Naruto writeup’... |
pentesting |
|
|
| Mon, 20 Jul 2026 10:56:47 GMT |
Task 2 -> OSINT Techniques (Google Dorking) |
google-dorking |
|
|
| Tue, 21 Jul 2026 03:32:29 GMT |
Best Python Libraries for Vulnerability Scanning |
vulnerability-scanning |
|
|
| Sat, 08 Aug 2026 00:15:51 GMT |
Uncovering a Privacy Bug in Proton Meet — How a Simple Logic â€... |
bug-bounty-writeup, bug-bounty-hunter |
|
|
| Wed, 05 Aug 2026 14:04:53 GMT |
Overheard at Breakfast (THM) Tryhackme Walkthrough Hacker Holiday... |
information-disclosure |
|
|
| Fri, 19 Sep 2025 07:40:16 GMT |
How I Tracked Our Clients’ Device Versions Without Direct Repor... |
zoomeye |
|
|
| Wed, 19 Nov 2025 19:44:02 GMT |
The Pulse of Liquidity: How DorkFi’s Interest Rates Adapt in Re... |
dorks |
|
|
| Thu, 23 Jul 2026 05:03:54 GMT |
Vulnerability Scanning Tools | TryHackMe (THM) |
vulnerability-scanning |
|
|
| Mon, 13 Apr 2026 06:37:51 GMT |
File Inclusion on DVWA |
file-inclusion |
|
|
| Sat, 08 Aug 2026 19:28:36 GMT |
The Cost of Self-Protection |
vulnerability |
|
|
| Sat, 25 Jul 2026 15:42:11 GMT |
#DevelopersWeapon (Left) vs#CybersecurityWeapon(Right) |
cybersecurity-tools |
|
|
| Sat, 18 Jul 2026 16:21:01 GMT |
Guide Presents Best Cybersecurity Investments for Small Business ... |
cybersecurity-tools |
|
|
| Mon, 27 Apr 2026 07:12:30 GMT |
One Weird Query String That Let Anyone Hijack Any Account in Roc... |
bounties |
|
|
| Wed, 22 Jul 2026 09:53:31 GMT |
XSS vs CSRF vs SSRF: Why Do So Many People Get Confused? |
cross-site-scripting |
|
|
| Fri, 10 Jul 2026 03:06:06 GMT |
I Attacked a Vulnerable Web App and Then Fixed It — A Security ... |
cross-site-scripting |
|
|
| Mon, 18 May 2026 00:04:46 GMT |
GOOGLE DORK Ä°LE BÄ°LGÄ°YÄ° HIZLI VE DOÄžRU BULMA |
google-dorking, google-dork, github-dorking |
|
|
| Wed, 29 Jul 2026 23:59:29 GMT |
How I Found a HIGH-Severity AI Security Issue on Khan Academy’s... |
vulnerability-disclosure |
|
|
| Mon, 13 Jul 2026 08:48:39 GMT |
Censys 是什麼？和 Shodan 常被拿來比較，兩者實際å·... |
censys |
|
|
| Sat, 08 Aug 2026 07:05:04 GMT |
Chaining Information Disclosure, SMB Access, and Sudo Misconfigur... |
information-disclosure |
|
|
| Tue, 04 Aug 2026 11:14:01 GMT |
Building an AI-Powered Container Scan Analyzer into our CI/CD Pip... |
vulnerability-scanning |
|
|
| Thu, 06 Aug 2026 12:49:45 GMT |
The Lesser-Known Art of Recon Using Favicon Hashes |
recon |
|
|
| Tue, 28 Jul 2026 23:12:01 GMT |
I Found a Major SaaS Platform’s Internal Credentials by Calling... |
information-disclosure |
|
|
| Thu, 06 Aug 2026 08:47:20 GMT |
AWS Cloud Security Challenge: SSRF, IMDSv2, and Cloud Takeover |
ssrf |
|
|
| Mon, 27 Jul 2026 04:15:42 GMT |
Clipboard-Safe File Transfer With PowerShell Chunks |
security-research |
|
|
| Sat, 08 Aug 2026 11:55:32 GMT |
The Request Changed. The Security Rule Didn’t. |
web-security, application-security |
|
|
| Tue, 04 Aug 2026 21:43:45 GMT |
How to Gather Client Feedback on Localhost Without Sending Code t... |
bugs |
|
|
| Mon, 08 Jun 2026 10:33:04 GMT |
How a Routine XSS Hunt Led to an Unexpected Database Information ... |
vulnerability-disclosure |
|
|
| Wed, 03 Jun 2026 15:20:33 GMT |
Most Businesses in Costa Rica Are Easier to Find Than You Think, ... |
directory-listing |
|
|
| Sun, 13 Jul 2025 16:32:21 GMT |
ProConOS Exposed: What ICS Security Teams Need to Know |
censys |
|
|
| Sun, 21 Sep 2025 07:02:30 GMT |
Affordable but Vulnerable? The Dark Side of CMORE HMI |
censys |
|
|
| Sun, 26 Jul 2026 17:59:41 GMT |
Recruit — THM Writeup |
local-file-inclusion |
|
|
| Mon, 03 Aug 2026 13:46:14 GMT |
How I Found a Bug That Could Let Anyone Hijack Your Account — W... |
idor |
|
|
| Tue, 21 Jul 2026 07:00:42 GMT |
Operation Silent Takeover: Multi-Stage Ransomware Attack Chain an... |
security-research |
|
|
| Sat, 09 May 2026 01:31:00 GMT |
Your Server Is Showing Everything It Shouldn’t -The Apache Dire... |
directory-listing |
|
|
| Fri, 07 Aug 2026 11:31:01 GMT |
Webhooks, Integrations & the SSRF Playground |
ssrf |
|
|
| Wed, 29 Jul 2026 19:09:36 GMT |
The Difference Between a Copilot and an Autonomous Security Agent |
pentest |
|
|
| Fri, 19 Jun 2026 17:40:08 GMT |
How to Get a Private Bug Bounty Invite on HackerOne — Without S... |
bugcrowd |
|
|
| Wed, 29 Jul 2026 08:59:41 GMT |
How I Uncovered an Account Takeover Flaw via Unexpired Reset Toke... |
bug-bounty-hunter |
|
|
| Sun, 21 Jun 2026 18:54:02 GMT |
From Hydra to RCE: Breaking Down TryHackMe’s Support Machine |
web-pentest |
|
|
| Fri, 24 Jan 2025 00:08:47 GMT |
A majestic temple opportunity of wellbeing and wellness |
web-pentest |
|
|
| Sat, 08 Aug 2026 12:13:49 GMT |
When Your AI Assistant Has More Permissions Than You Do: An Acces... |
bug-bounty-tips, bugs, bugbounty-writeup |
|
|
| Wed, 15 Jul 2026 01:51:32 GMT |
I Asked the Frontend for Secrets, and It Said Yes |
bug-bounty-hunter |
|
|
| Sat, 01 Aug 2026 12:29:07 GMT |
Exploiting a Vulnerable Windows 7 Machine Using EternalBlue (MS17... |
exploit |
|
|
| Sun, 22 Oct 2023 19:57:30 GMT |
Performing a Log Poisoning Attack |
log-poisoning |
|
|
| Thu, 23 Jul 2026 11:57:27 GMT |
System Design Interview: How Would You Build a Reliable Resumable... |
file-upload |
|
|
| Fri, 31 Jul 2026 19:12:34 GMT |
Zero-click Admin Takeover via Unguarded login_email |
bugbounty-writeup |
|
|
| Fri, 26 Jun 2026 06:46:44 GMT |
How Google Dorking Can Streamline Your SEO Research Process |
google-dorking |
|
|
| Sun, 14 Jun 2026 22:00:33 GMT |
La sémantique de l’esquive : Analyse lexicologique du discours... |
lfi |
|
|
| Thu, 23 Jul 2026 17:59:49 GMT |
HTB SpookyPass Writeup |
pentest, cyber-sec |
|
|
| Tue, 14 Jul 2026 17:10:47 GMT |
File Inclusion Challenge (TryHackMe) |
file-inclusion |
|
|
| Tue, 28 Jul 2026 16:43:20 GMT |
Two JWT Mistakes That Can Compromise Your Authentication System |
cross-site-scripting |
|
|
| Wed, 01 Jul 2026 05:23:05 GMT |
Broken Authentication Vulnerability That Allowed Unauthorized Use... |
bugcrowd |
|
|
| Tue, 04 Aug 2026 17:15:45 GMT |
How I Found a $250 BOLA in a Government Transport App’s Real-Ti... |
idor |
|
|
| Sun, 05 Jul 2026 11:31:00 GMT |
Google Dorking for Bug Hunters |
google-dork |
|
|
| Wed, 12 Feb 2025 22:46:35 GMT |
https://www.express.co.uk/life-style/property/2012927/cleaning-ch... |
web-pentest |
|
|
| Wed, 05 Aug 2026 00:08:20 GMT |
HTB: Kobold |
rce |
|
|
| Tue, 04 Aug 2026 12:00:49 GMT |
The Server Is a Servant: SSRF in Labs |
ssrf |
|
|
| Fri, 07 Aug 2026 04:26:15 GMT |
Why Spreadsheets Don’t Scale for Vulnerability Management |
cve |
|
|
| Thu, 30 Jul 2026 15:39:49 GMT |
HACKING JULY DAY 25: VULN-BANK EXPLOITATION #9 |
xss-vulnerability |
|
|
| Mon, 22 Jun 2026 04:22:38 GMT |
Subdomain Takeover: A Complete Guide from Beginner to Advanced |
subdomain-takeover |
|
|
| Sat, 30 May 2026 18:19:20 GMT |
Admin Dashboard Accessible Without Authentication |
vulnerability-disclosure |
|
|
| Sat, 14 Mar 2026 18:06:12 GMT |
Web Security Series #3 — Discovering Credentials Using Cluster ... |
bug-bounty-hunting |
|
|
| Fri, 07 Aug 2026 09:37:42 GMT |
Are We Missing the #Ai Security Warning Signs? |
cyber-sec |
|
|
| Thu, 06 Aug 2026 03:56:15 GMT |
Apostrophe Has Abolished the Password |
bug-bounty-tips |
|
|
| Mon, 27 Jul 2026 20:47:05 GMT |
TryHackMe XSS Introduction Walkthrough |
cross-site-scripting |
|
|
| Tue, 04 Aug 2026 07:20:26 GMT |
Your AI Agent Has an IDOR Problem |
idor |
|
|
| Mon, 03 Aug 2026 09:22:06 GMT |
Server-2: Vulnerable OnlyPhone— VulnerabilityWeb Walkthrough (4... |
directory-listing |
|
|
| Sun, 15 Mar 2026 17:49:52 GMT |
TryHackMe — Takeover Writeup |
subdomain-takeover |
|
|
| Sat, 01 Aug 2026 17:32:15 GMT |
The Complete Pentest Methodology: A Step by Step Practical Guide ... |
exploit |
|
|
| Mon, 29 Jun 2026 10:46:38 GMT |
Costa Rica Canopy Tours: Choosing Experiences That Match Your Com... |
directory-listing |
|
|
| Sat, 01 Aug 2026 19:04:44 GMT |
Web Security — Part 2: Cross-Site Scripting (XSS) |
xss-attack, cross-site-scripting |
|
|
| Tue, 13 Jan 2026 13:27:13 GMT |
Hacking “Time�: When Critical Infrastructure Forgets to Set a... |
vulnerability-disclosure |
|
|
| Sun, 19 Jul 2026 20:01:51 GMT |
TryHackMe Nmap Live Host Discovery (versão em português) |
pentest |
|
|
| Thu, 06 Aug 2026 10:02:10 GMT |
PDF24 Creator vs PDF Forge: Offline or Online PDF Tools? |
file-upload |
|
|
| Mon, 29 Jun 2026 11:44:13 GMT |
Cybersecurity Practice Lab 3 |
cross-site-scripting |
|
|
| Mon, 03 Aug 2026 19:09:26 GMT |
TryHackMe: “Beach Bar� Room Walkthrough ( Hacker’s Holiday ... |
remote-code-execution |
|
|
| Mon, 18 May 2026 07:01:05 GMT |
InterLink Migration Vote Begins | Active Bounty Season 3 |
bounty-program |
|
|
| Fri, 07 Aug 2026 09:00:15 GMT |
12 Real-World XSS Attacks: A Hands-On Walkthrough from WAF Bypass... |
xss-attack |
|
|
| Tue, 11 Nov 2025 16:43:14 GMT |
Beyond Google: Navigating the Hidden Internet with Shodan and Cen... |
censys |
|
|
| Thu, 09 Jul 2026 12:43:47 GMT |
The Easy Bug Series | #01 |
bounty-program |
|
|
| Sat, 18 Jul 2026 06:52:39 GMT |
[Support] — Exploiting LFI, Weak Session Cookies, and Command... |
local-file-inclusion |
|
|
| Fri, 10 Nov 2023 03:38:01 GMT |
Apache error.log advanced Log poisoning RCE |
log-poisoning |
|
|
| Sat, 30 May 2026 11:25:12 GMT |
Cross-Site Scripting (XSS) via Client-Side Filter Bypass |
xss-bypass |
|
|
| Sat, 01 Aug 2026 13:18:29 GMT |
Incident Analysis & Response: Check Point Security Gateway CVE-20... |
lfi |
|
|
| Thu, 16 Jul 2026 18:52:16 GMT |
From a URL Parameter to Full System Access: Logslinger CTF |
lfi |
|
|
| Fri, 31 Jul 2026 06:27:30 GMT |
Secure File Upload: A Complete Guide to Prevent File Upload Vulne... |
file-upload |
|
|
| Thu, 28 May 2026 15:59:28 GMT |
File Inclusion Vulnerability Assessment |
file-inclusion |
|
|
| Mon, 06 Jul 2026 11:47:49 GMT |
UK Business Directory: Strategic Visibility for Local Market Succ... |
directory-listing |
|
|
| Wed, 17 Dec 2025 09:57:30 GMT |
The Mother Lode: Hacking with GitHub Dorking |
github-dorking |
|
|
| Sat, 01 Aug 2026 09:00:49 GMT |
Vulnerability Assessment vs Penetration Testing: What’s the Dif... |
vapt |
|
|
| Mon, 13 Jul 2026 19:28:20 GMT |
Vulnerability Scanning vs. Autonomous Pentesting: Why Scanners Ar... |
vulnerability-scanning |
|
|
| Tue, 17 Mar 2026 09:18:53 GMT |
Web Security Series #6 — Exploiting SQL Injection to Extract Se... |
bug-bounty-hunting |
|
|
| Thu, 02 Apr 2026 18:59:50 GMT |
File Inclusion (LFI/RFI) — Extracting Sensitive Data from confi... |
file-inclusion |
|
|
| Tue, 19 May 2026 17:44:55 GMT |
Day 5: Footprinting & Reconnaissance -How Attackers Know Everythi... |
google-dorking |
|
|
| Tue, 28 Apr 2026 07:09:41 GMT |
owockibot: The Bounty Board Powering the Agent Economy |
bounty-program |
|
|
| Fri, 07 Aug 2026 08:29:40 GMT |
Ownership Story: Building a 5GB File Upload Service Using Streams |
file-upload |
|
|
| Thu, 30 Jul 2026 11:31:01 GMT |
Shodan & Censys — The Search Engines for Hackers |
shodan |
|
|
| Tue, 22 Apr 2025 10:38:20 GMT |
Trump’s Tariffs Cut Out Censys — ZoomEye Steps In Strong! |
zoomeye |
|
|
| Sun, 21 Jun 2026 18:31:00 GMT |
Can You Build a Career on Bugcrowd? I’m Going to Test It. (Day ... |
bugcrowd, bounty-program |
|
|
| Thu, 16 Jul 2026 15:34:38 GMT |
Workflow Bypass Leading to Unauthorized Access to Sensitive Recor... |
bug-bounty-hunter |
|
|
| Sat, 09 May 2026 02:26:22 GMT |
How I Discovered a Reflected XSS Vulnerability on a Major German ... |
xss-bypass |
|
|
| Sat, 06 Jun 2026 07:18:44 GMT |
Update: The Ending of My $500 Loss and Web Cache Poisoning Story. |
web-cache-poisoning |
|
|
| Sun, 26 Jul 2026 09:22:27 GMT |
CVE-2026–58138 |
rce |
|
|
| Mon, 27 Jul 2026 19:35:36 GMT |
Brew Bank Revenge — Official Writeup | EYCC CTF |
lfi |
|
|
| Tue, 23 Jun 2026 07:06:16 GMT |
Bug Bounty Recon Mastery →Advanced Reconnaissance and Attack Su... |
subdomain-enumeration |
|
|
| Sun, 26 Jul 2026 13:24:32 GMT |
Beyond SSL Pinning: When Changing One Number Broke an App’s Aut... |
idor |
|
|
| Thu, 06 Aug 2026 08:56:15 GMT |
XSS Lab in Cloudflare Pages |
xss-attack |
|
|
| Sat, 18 Jul 2026 15:13:45 GMT |
PentesterLab — Recon 10: Visual Reconnaissance |
recon |
|
|
| Wed, 22 Jul 2026 19:19:21 GMT |
Back From Vacation & Launching Open Beta: Help Us Test NextBlock ... |
bounty-program |
|
|
| Tue, 12 May 2026 17:55:36 GMT |
Wild Bounty Showdown PG Soft: Rahsia Maxwin Cowboy & Pola Gacor T... |
bounties |
|
|
| Mon, 18 May 2026 13:05:18 GMT |
Subdomain Takeover |
subdomain-takeover |
|
|
| Tue, 23 Jun 2026 14:32:52 GMT |
Authentication Bypass & Information Disclosure in a Fortune 500 C... |
vdp |
|
|
| Fri, 17 Jul 2026 16:56:29 GMT |
CTF: Archangel TryhackMe Room |
local-file-inclusion |
|
|
| Sat, 18 Jul 2026 13:42:58 GMT |
Experimental Confirmation of CVE-2026–25262 on Snapdragon 8 Gen... |
security-research |
|
|
| Sun, 07 Jun 2026 18:38:23 GMT |
Visualizing Physical Attack Surface Exposure with Python, WiGLE, ... |
shodan |
|
|
| Wed, 29 Apr 2026 14:14:58 GMT |
Part 2Â : Cross-Site Scripting (XSS) |
xss-bypass |
|
|
| Thu, 30 Jul 2026 22:35:30 GMT |
$1,500 AI System Prompt Leak: Using this Burp Suite Configuration |
hackerone |
|
|
| Thu, 07 May 2026 06:41:01 GMT |
Github Dorking |
dorking, github-dorking |
|
|
| Tue, 21 Jul 2026 19:02:10 GMT |
La gauche radicale face au piège de l’essentialisation des jui... |
lfi |
|
|
| Tue, 15 Jul 2025 12:15:58 GMT |
“Secure� OPC UA Setups Are Being Hacked — Here’s Why |
censys |
|
|
| Fri, 01 May 2026 09:40:56 GMT |
Excessive Data Exposure Leading to Unauthorized Access to Paid Fe... |
vulnerability-disclosure |
|
|
| Wed, 16 Jul 2025 12:07:42 GMT |
Hackers Love This 1979 Protocol (Because It Can’t Defend Itself... |
censys |
|
|
| Sat, 08 Aug 2026 16:08:26 GMT |
CRTA - da Aplicação Web ao Domain Admin |
recon |
|
|
| Tue, 04 Aug 2026 18:41:33 GMT |
Towel on the Sunbed — TryHackMe Walkthrough | Race Condition E... |
bugbounty-writeup |
|
|
| Sun, 21 Jun 2026 00:45:05 GMT |
Atdork |
google-dorking, google-dork |
|
|
| Tue, 19 May 2026 14:13:53 GMT |
Guildford to Box Hill |
dorking |
|
|
| Thu, 11 Jun 2026 04:44:15 GMT |
AtDork dorking tools |
google-dork |
|
|
| Sat, 18 Jul 2026 09:07:12 GMT |
wp2shell: The WordPress Core Flaw That Turns an Anonymous Request... |
remote-code-execution |
|
|
| Mon, 03 Aug 2026 08:01:12 GMT |
Vulnerability Scanning with Nessus: A TryHackMe Walkthrough (Setu... |
vulnerability-scanning |
|
|
| Fri, 31 Jul 2026 07:03:00 GMT |
What a Wrong API Key Taught Me About Debugging, Growth and Seekin... |
api-key |
|
|
| Mon, 03 Aug 2026 12:34:07 GMT |
Inside cloud-native Java: Exploring Quarkus |
bugs |
|
|
| Sat, 08 Aug 2026 11:16:01 GMT |
Testing Authorization Boundaries in Multi-Region, Multi-Tenant Ap... |
application-security |
|
|
| Sun, 02 Aug 2026 11:25:48 GMT |
Writing Custom Exploits: From Vulnerability Discovery to Working... |
exploit |
|
|
| Thu, 12 Mar 2026 18:11:47 GMT |
A Simple P4 Bug That Ended as Duplicate |
bug-bounty-hunting |
|
|
| Wed, 29 Jul 2026 04:46:59 GMT |
Shodan.io Integration with Wazuh SIEM Monitor Your Critical Asset... |
shodan |
|
|
| Fri, 07 Aug 2026 21:46:53 GMT |
I Built an AI-Assisted Threat Modeling Pipeline. The Hardest Part... |
application-security |
|
|
| Sun, 26 Jan 2025 19:08:11 GMT |
Matrix strike’s back against honesty from a power stance |
web-pentest |
|
|
| Wed, 05 Aug 2026 13:20:31 GMT |
Top 10 VAPT Companies in India for 2026: Services, Pros, Cons and... |
vapt |
|
|
| Tue, 21 Jul 2026 14:58:07 GMT |
“Join Team� | CyberTalents | Chaining LFI and Unrestricted ... |
lfi |
|
|
| Sat, 11 Jul 2026 03:01:04 GMT |
Achieving Zero-Downtime AI for Security Research: Guide to Settin... |
security-research |
|
|
| Tue, 18 Nov 2025 08:33:41 GMT |
A Chain of Vulnerabilities Leading to Critical Information Disclo... |
bug-bounty-program |
|
|
| Tue, 16 Jun 2026 11:22:14 GMT |
Review AtDork: Tool Dorking Python Terbaik 2026? |
dorking |
|
|
| Fri, 08 May 2026 22:01:34 GMT |
AI Is Breaking the Two Rules That Kept the Internet Safe — And ... |
vulnerability-disclosure |
|
|
| Sat, 08 Aug 2026 19:50:21 GMT |
PoC Vault by CyberSecPlayground |
bug-bounty-tips |
|
|
| Wed, 25 Mar 2026 08:34:09 GMT |
Improper Input Handling Leading to Client Side Code Execution and... |
vulnerability-disclosure |
|
|
| Fri, 10 Jul 2026 18:20:51 GMT |
Hello World! First post, first CVE |
security-research |
|
|
| Tue, 16 Jun 2026 02:05:28 GMT |
How to Find More Subdomains Than Everyone Else |
recon |
|
|
| Fri, 31 Jul 2026 11:31:01 GMT |
Attack Surface Management — Seeing What the Company Can’t |
hackerone |
|
|
| Tue, 16 Jun 2026 13:11:36 GMT |
Understanding Web Cache Poisoning via Unkeyed Headers: A PortSwig... |
web-cache-poisoning |
|
|
| Fri, 29 May 2026 17:22:37 GMT |
Cracking SameSite for a $2,000 Web Cache Deception |
web-cache-poisoning |
|
|
| Mon, 16 Mar 2026 14:32:42 GMT |
Web Security Series #5 — Exploiting Broken Access Control via T... |
bug-bounty-hunting |
|
|
| Sun, 19 Jul 2026 09:38:45 GMT |
How Shodan Maps the Entire Internet — And What That Means for Y... |
shodan |
|
|
| Tue, 09 Jun 2026 06:35:46 GMT |
From LFI to Database Takeover and the RCE That Almost Was |
lfi |
|
|
| Thu, 09 Jul 2026 12:57:30 GMT |
Essential Cybersecurity Tools Every Small Business Needs In 2026 |
cybersecurity-tools |
|
|
| Sun, 26 Jul 2026 17:02:58 GMT |
Offensive Security Intro (versão em português) |
pentest |
|
|
| Fri, 31 May 2024 13:29:16 GMT |
Map of the worlds best URLs 2025 |
log-poisoning |
|
|
| Wed, 24 Jun 2026 11:31:00 GMT |
CSRF Explained Like You’re Five |
bugcrowd |
|
|
| Sun, 14 Jun 2026 13:21:02 GMT |
Subdomain Enumeration: A Core Technique Every Bug Hunter Must Mas... |
subdomain-enumeration |
|
|
| Fri, 12 Jun 2026 12:24:10 GMT |
Watcher (THM) Tryhackme Medium Challenge |
local-file-inclusion |
|
|
| Thu, 06 Aug 2026 16:05:02 GMT |
Groq’dan Api Key Nasıl Alınır (2026) |
api-key |
|
|
| Sat, 08 Aug 2026 12:57:41 GMT |
Bir XSS Turu: Temelden Az Bilinene (9 farklı senaryo) |
xss-attack, xss-vulnerability, xss-bypass |
|
|
| Thu, 09 Apr 2026 17:39:27 GMT |
From 401 to BAC: How a Refresh Broke Workspace Authorization |
vulnerability-disclosure |
|
|
| Sat, 04 Jul 2026 15:01:30 GMT |
Sistemin Anahtarını Ele Geçirmek: RCE Injection ve Gelişmiş ... |
remote-code-execution |
|
|
| Sat, 04 Jul 2026 14:50:11 GMT |
Dosya Sistemine Sızış: Directory Traversal ve LFI Zafiyetlerin... |
local-file-inclusion |
|
|
| Sun, 19 Jul 2026 19:30:09 GMT |
Login Security Testing Checklist |
bug-bounty-hunting |
|
|
| Thu, 02 Jul 2026 16:02:56 GMT |
Strengthening Web3 Trust with Blockchain Incident Response & Fore... |
bug-bounty-program |
|
|
| Sun, 14 Dec 2025 06:37:06 GMT |
My Bug Bounty Diary |
subdomain-enumeration |
|
|
| Sat, 02 Aug 2025 14:15:23 GMT |
The Silent Risk in Your ICS: Why S7 Protocol Needs Security Atten... |
censys |
|
|
| Wed, 29 Jul 2026 04:08:16 GMT |
Day 26: Cross-Site Scripting (XSS) - Hacker Sidekick Certified Vi... |
xss-vulnerability |
|
|
| Mon, 03 Aug 2026 20:28:37 GMT |
Your App Leaks More Secrets Than You Think Even When It’s “S... |
xss-attack |
|
|
| Sun, 02 Aug 2026 07:36:20 GMT |
Escalating a Blind Upload to RCE via Path Traversal into Cron and... |
rce |
|
|
| Wed, 05 Aug 2026 06:08:24 GMT |
How to Make React File Upload Progress and Errors Accessible |
file-upload |
|
|
| Wed, 29 Jul 2026 12:30:32 GMT |
Is Google Dorking Legal? Understanding the Ethical and Legal Aspe... |
google-dorking, google-dork |
|
|
| Thu, 27 Mar 2025 23:46:11 GMT |
Make Break and Betrayal |
web-pentest |
|
|
| Fri, 01 Aug 2025 06:17:06 GMT |
15,000 Critical Systems Are Exposed — Thanks to This Outdat... |
censys |
|
|
| Mon, 08 Jun 2026 09:48:02 GMT |
XSS WAF Bypass: The Ultimate Deep Dive |
xss-bypass |
|
|
| Fri, 07 Aug 2026 20:26:18 GMT |
CAPTCHA Bypass Bug on a Bug Bounty Program |
hackerone |
|
|
| Wed, 05 Aug 2026 04:40:07 GMT |
Why Cybersecurity is the New Literacy in the Digital Age |
hackerone |
|
|
| Wed, 27 May 2026 08:42:26 GMT |
Open Source Transparency Was a Moat — AI Is Turning It Into a L... |
vulnerability-disclosure |
|
|
| Sat, 13 Jun 2026 15:28:09 GMT |
Cómo detectar sitios gubernamentales comprometidos con Spam SEO ... |
google-dork |
|
|
| Wed, 01 Jul 2026 11:07:22 GMT |
Archangel TryHackMe Walkthrough | LFI, Log Poisoning & Linux Pri... |
local-file-inclusion |
|
|
| Wed, 23 Jul 2025 15:15:01 GMT |
TryHackMe Include walkthrough: SSRF, log poisoning & LFI2RCE, wit... |
log-poisoning |
|
|
| Sat, 08 Aug 2026 09:13:40 GMT |
NoteVault — Full Walkthrough |
cve |
|
|
| Thu, 30 Jul 2026 11:51:51 GMT |
Security Researcher | Cybersecurity Student | Ethical Hacking ... |
bugbounty-writeup |
|
|
| Tue, 10 Feb 2026 23:04:46 GMT |
Effective Dorking Tools |
dorking |
|
|
| Sat, 25 Apr 2026 14:46:05 GMT |
File Inclusion— Skills Assesment (HTB) |
file-inclusion |
|
|
| Tue, 30 Jun 2026 11:31:00 GMT |
Subdomain Takeover — Claiming Forgotten Assets |
subdomain-takeover |
|
|
| Mon, 04 May 2026 14:48:00 GMT |
I Found 150+ Vulnerabilities in DeFi Protocols. Here’s Why I C... |
bounties |
|
|
| Mon, 18 May 2026 14:37:14 GMT |
File Inclusion - Challenge Part | TryHackMe Walkthrough |
file-inclusion |
|
|
| Wed, 17 Jun 2026 08:46:50 GMT |
Amazon Prime for Young Adults — Why Every College Soccer Fan Ne... |
bounties |
|
|
| Sat, 08 Aug 2026 04:52:39 GMT |
DESIGN OF A CENTRALIZED MONITORING DASHBOARD FOR WAF AND RATE LIM... |
web-security |
|
|
| Mon, 03 Aug 2026 14:08:21 GMT |
Apple Just Had to Cap Bug Reports Because AI Is Flooding Its Own ... |
bugs |
|
|
| Thu, 28 May 2026 16:33:00 GMT |
CONTENT DISCOVERY-TRYHACKME WALKTHROUGH |
google-dorking |
|
|
| Wed, 25 Feb 2026 01:47:45 GMT |
How I Found a Path Traversal in the Rancher Dashboard via HAR Rep... |
web-pentest |
|
|
| Mon, 29 Jun 2026 01:03:39 GMT |
Belajar tentang File Inclusion dalam Penetration Testing |
local-file-inclusion, file-inclusion |
|
|
| Thu, 13 Mar 2025 18:09:56 GMT |
How I Found Sensitive Information using Github Dorks in Bug Bount... |
github-dorking |
|
|
| Mon, 29 Jun 2026 06:52:04 GMT |
My First Cross-Site Scripting (XSS) Vulnerability: A Journey of P... |
xss-bypass |
|
|
| Wed, 29 Jul 2026 04:39:38 GMT |
Create your free AI API-Key with Groq to use in ScaleCraft Deep C... |
api-key |
|
|
| Wed, 29 Jul 2026 06:41:51 GMT |
What is Web Cache Poisoning? |
web-cache-poisoning |
|
|
| Wed, 27 May 2026 19:50:08 GMT |
Why Your Directory Listing Service Isn’t Working — And the Fr... |
directory-listing |
|
|
| Sun, 12 Jul 2026 04:43:16 GMT |
A Critical Vulnerability in PraisonAI: What You Need to Know |
remote-code-execution |
|
|
| Tue, 21 Apr 2026 15:05:26 GMT |
Web Security Series #17 — Exploiting Local File Inclusion (LFI)... |
file-inclusion |
|
|
| Tue, 04 Aug 2026 06:54:55 GMT |
Secret Management: Securely Storing Passwords, API Keys, and Cert... |
api-key |
|
|
| Tue, 14 Jul 2026 02:38:44 GMT |
What Is YARA? The Tool Security Researchers Use to Spot Malware P... |
cybersecurity-tools |
|
|
| Fri, 24 Jul 2026 07:45:57 GMT |
AdaptixC2 & Domain Trusts: Chained Compromise of a Multi-Forest A... |
pentest |
|
|
| Mon, 06 Jul 2026 09:03:08 GMT |
CVE-2025–43807: Stored Cross-Site Scripting (XSS) Vulnerability... |
cross-site-scripting |
|
|
| Thu, 09 Jul 2026 08:16:01 GMT |
Bug Bounty — Bypassing Access Controls: How a Single Boolean Fl... |
bug-bounty-hunter |
|
|
| Wed, 29 Jul 2026 18:31:01 GMT |
SSRF (Server-Side Request Forgery) |
ssrf |
|
|
| Mon, 27 Jul 2026 05:47:50 GMT |
Insights into XSS: Types, Where to Find Them, and How I Exploited... |
xss-vulnerability |
|
|
| Mon, 22 Jun 2026 07:48:39 GMT |
Still Confused by Amass or Can’t Understand Its Results, This I... |
recon |
|
|
| Thu, 06 Aug 2026 15:33:21 GMT |
„Samy is my hero“: Der freundlichste Hack der Internetgeschic... |
xss-attack |
|
|
| Mon, 03 Aug 2026 05:32:49 GMT |
Remote code execution via web shell upload |
remote-code-execution |
|
|
| Fri, 07 Aug 2026 08:34:38 GMT |
I Gave an Open-Weight Model a Linux Kernel Bug(CVE-2026–64564). |
cyber-sec |
|
|
| Wed, 05 Aug 2026 12:57:44 GMT |
Bug Life Cycle & Test Scenario vs Test Case – A Complete Guide ... |
bugs |
|
|
| Sun, 02 Aug 2026 08:57:15 GMT |
Sqli-Header-Lab |
hackerone |
|
|
| Sun, 12 Jul 2026 19:11:01 GMT |
Building a File Upload Scanning Pipeline for Laravel and S3 |
vulnerability-scanning |
|
|
| Wed, 22 Oct 2025 14:11:32 GMT |
Mastering Subdomain Enumeration: A Beginner’s Guide to Expandin... |
subdomain-enumeration |
|
|
| Sat, 08 Aug 2026 20:56:32 GMT |
Muse Spark 1.1: Capabilities and Autonomous Security Incidents |
vulnerability |
|
|
| Sun, 17 May 2026 02:56:19 GMT |
The 3 Bug Hunting Habits That Made Me Go From $0 to $5k (And None... |
bug-bounty-program |
|
|
| Fri, 06 Feb 2026 06:33:08 GMT |
5 Ways to Bypass Email Verification Without Using Any Tool |
bug-bounty-program |
|
|
| Tue, 04 Aug 2026 14:18:01 GMT |
Encrypt a High-Privilege API Key at Rest: A GPG Vault That Keeps ... |
api-key |
|
|
| Fri, 17 Jul 2026 07:05:37 GMT |
Lab 3 : Source code disclosure via backup files |
information-disclosure |
|
|
| Tue, 04 Aug 2026 17:39:17 GMT |
The Debug Flag That Opened the Door: A Journey From Django Debug ... |
rce |
|
|
| Fri, 07 Aug 2026 08:48:43 GMT |
I Built A Phishing Triage Copilot With Claude: AI Cyber Defense O... |
cybersecurity-tools |
|
|
| Tue, 30 Jun 2026 12:11:15 GMT |
El toro de Wall Street ya está en WhiteBIT |
bounty-program |
|
|
| Thu, 30 Jul 2026 17:14:55 GMT |
3 Hops to RCE. | MCP Security Part 4 |
rce |
|
|
| Sat, 08 Aug 2026 11:30:57 GMT |
Your AI Agent Can Use a Computer. Can You Approve Its Authority? |
application-security |
|
|
| Fri, 31 Jul 2026 07:56:13 GMT |
CVE-2026–16764 // Privilege Escalation on DefectDojo ≤ 2.59.0... |
exploit |
|
|
| Wed, 17 Jun 2026 07:53:43 GMT |
Operation Liwanag: The Same Map a Chinese Intelligence Asset Drew... |
shodan, censys |
|
|
| Fri, 12 Jun 2026 11:04:39 GMT |
Why Your Subdomain Takeover Reports Keep Getting Closed as N/A (A... |
subdomain-takeover |
|
|
| Wed, 05 Aug 2026 09:45:09 GMT |
DAST Security Testing in UAE: Why the App That Passed Every Code ... |
vapt |
|
|
| Wed, 17 Jun 2026 19:02:16 GMT |
TryHackMe Lo-Fi Writeup |
lfi |
|
|
| Sun, 05 Jul 2026 12:32:24 GMT |
How to Pick a Directory Listing Service That Actually Works |
directory-listing |
|
|
| Thu, 02 Oct 2025 06:59:46 GMT |
Endless Cashback Glitch:How I Unlocked Unlimited Free Orders with... |
bug-bounty-program |
|
|
| Fri, 07 Aug 2026 20:55:06 GMT |
Lá»— hổng bảo máºt trong bà n phÃm Tiếng Việt của Mic... |
information-disclosure |
|
|
| Mon, 03 Aug 2026 09:11:44 GMT |
TryHackMe Guided Pentest Web Writeup — Real-World VAPT Methodol... |
vapt |
|
|
| Sat, 01 Aug 2026 03:21:52 GMT |
The Complete Beginner-to-Advanced Guide to Penetration Testing & ... |
vapt |
|
|
| Thu, 09 Jul 2026 23:38:38 GMT |
AtDork 1.3.9.6? 180,000 Dorks free open source |
google-dork, dorks |
|
|
| Fri, 31 Jul 2026 13:46:01 GMT |
How I Found My First Real-Life RCE: Exploiting CVE-2026–53576 i... |
remote-code-execution |
|
|
| Thu, 11 Jun 2026 05:41:48 GMT |
Shodan: The Search Engine Hackers Don’t Want You to Know About |
shodan |
|
|
| Wed, 01 Jul 2026 11:02:50 GMT |
Bounty Hacker |
bounties |
|
|
| Fri, 31 Jul 2026 14:59:38 GMT |
How HTTP Request Smuggling Still Exist and How to exploit |
exploit |
|
|
| Tue, 09 Jun 2026 07:00:48 GMT |
Costa Rica Beaches: Which Ones Are Worth the Drive |
directory-listing |
|
|
| Mon, 03 Aug 2026 04:56:01 GMT |
The Bug Bounty Playbook: OAuth Callback and Redirect Manipulation |
hackerone |
|
|
| Fri, 31 Jul 2026 19:14:40 GMT |
Bypassing Account Sign-up Restrictions with a Unicode Character |
bugbounty-writeup |
|
|
| Sat, 01 Aug 2026 08:25:35 GMT |
How I Found an SSRF in Mozilla Firefox That Could Compromise the ... |
ssrf |
|
|
| Sat, 04 Jul 2026 14:44:26 GMT |
Behind the Screen Name: Cybersecurity in |
cyber-sec |
|
|
| Thu, 23 Jul 2026 16:49:49 GMT |
WP2Shell (CVE-2026–63030): The WordPress Core Bug That Let Anyo... |
rce |
|
|
| Mon, 03 Aug 2026 06:00:35 GMT |
API Key vs Access Token: What’s the Difference? A Complete Guid... |
api-key |
|
|
| Thu, 16 Jul 2026 04:28:38 GMT |
How to Install GAU (GetAllURLs) Tool on Kali Linux — Complete G... |
bugcrowd |
|
|
| Tue, 14 Jul 2026 16:44:08 GMT |
TuesdayTool 48: OSINTLeak — A Modern OSINT Platform for Digital... |
cybersecurity-tools |
|
|
| Tue, 07 Jul 2026 02:35:59 GMT |
Search Skills: Mastering Cyber Security Research & OSINT |
shodan |
|
|
| Thu, 18 Jun 2026 15:00:04 GMT |
Bore-dom, IP Pools, and a Nation’s Water Control: How I Breache... |
cyber-sec |
|
|
| Thu, 06 Aug 2026 00:01:26 GMT |
CVE-2026–65971: A Complete Walkthrough of the Livewire PowerGri... |
exploit, cve |
|
|
| Mon, 13 Jul 2026 11:04:30 GMT |
Cache Poisoning: From Cache Hits to Bounty |
web-cache-poisoning |
|
|
| Sun, 17 May 2026 15:50:44 GMT |
Web Cache Poisoning |
web-cache-poisoning |
|
|
| Wed, 17 Jun 2026 18:22:29 GMT |
Why 90% of Bug Bounty Hunters Fail in Their First 3 Months (And H... |
recon |
|
|
| Thu, 06 Aug 2026 05:44:41 GMT |
2026 Free Janitor AI API Key Acquisition & Integration Troublesho... |
api-key |
|
|
| Fri, 07 Aug 2026 16:37:09 GMT |
MariaDB CVE-2026–48165: Authenticated Remote Code Execution thr... |
bug-bounty-writeup, cve |
|
|
| Fri, 12 Jun 2026 10:04:19 GMT |
ATDORK |
google-dork |
|
|
| Sat, 08 Aug 2026 07:42:05 GMT |
Automated CVE & Vulnerability Intelligence Tracking Pipeline |
cve |
|
|
| Thu, 14 Aug 2025 10:54:38 GMT |
Unlocking the Hidden Power of Search Engines |
censys |
|
|
| Sun, 02 Aug 2026 23:45:43 GMT |
CVE-2026–64600 “RefluXFS� — Rooting Linux Through an XFS ... |
exploit |
|
|
| Wed, 03 Jun 2026 14:55:44 GMT |
Recruit | TryHackMe | Walkthrough |
local-file-inclusion |
|
|
| Sun, 23 Feb 2025 11:17:25 GMT |
$1000-$10k worth Leaks via Github Secret Dorks |
github-dorking |
|
|
| Wed, 13 May 2026 07:37:16 GMT |
How to Find Subdomains Using Shodan and the Favicon Hash Trick |
subdomain-enumeration, shodan |
|
|
| Tue, 28 Jul 2026 10:38:15 GMT |
How I Built FlexTools Pro — A Privacy-First Toolbox That Actual... |
file-upload |
|
|
| Sat, 08 Aug 2026 07:08:10 GMT |
The Metabase Breach Wasn’t Just a SQL Injection Problem |
bugs |
|
|
| Thu, 06 Aug 2026 12:17:57 GMT |
How I Almost Made $1,000 with a Pre-Account Takeover |
bugbounty-writeup |
|
|
| Sat, 08 Aug 2026 12:15:50 GMT |
Your Agent’s Command Allowlist Is a Parser, and It Disagrees Wi... |
application-security |
|
|
| Mon, 13 Apr 2026 03:31:01 GMT |
Google Dorks Google Ko Bana Do Apna Hacking Tool: Free Mein Bugs ... |
github-dorking |
|
|
| Tue, 23 Jun 2026 16:59:56 GMT |
The Internet Never Forgets : A Beginner’s Guide to OSINT |
recon |
|
|
| Sat, 08 Aug 2026 21:25:09 GMT |
Why flying bugs are drawn to artificial lights? |
bugs |
|
|
| Thu, 11 Sep 2025 22:20:14 GMT |
It’s Coming: DorkFi Delivers PreFi Rewards Surge |
dorking |
|
|
| Tue, 18 Nov 2025 18:12:40 GMT |
Dork Labs Awarded AWS Activate Startup Grant |
dorks |
|
|
| Fri, 17 Jul 2026 00:49:39 GMT |
Malware Analysis and Domain Investigation: Following the Trail fr... |
cybersecurity-tools |
|
|
| Fri, 07 Aug 2026 20:16:01 GMT |
The SSRF That Wasn’t Supposed to Work Twice |
pentesting, bug-bounty-writeup |
|
|
| Mon, 20 Jul 2026 06:24:37 GMT |
Using Cache Deception Techniques to Discover Cache Poisoning Vect... |
web-cache-poisoning |
|
|
| Sat, 08 Aug 2026 17:56:15 GMT |
LazyHound: The Smart Enumeration Engine That Finds the Direct Pat... |
cybersecurity-tools |
|
|
| Sat, 01 Aug 2026 15:04:25 GMT |
Server-Side Request Forgery (SSRF) |
ssrf |
|
|
| Thu, 02 Apr 2026 17:35:36 GMT |
How I Found a Subdomain Takeover via BetterUptime |
subdomain-takeover |
|
|
| Sat, 08 Aug 2026 23:53:23 GMT |
Reversing EtherRAT: When Malware Uses the Blockchain for C2 |
infosec |
|
|
| Thu, 20 Nov 2025 17:16:47 GMT |
The Health Factor: How DorkFi Keeps Your Position Safe |
dorks |
|
|
| Fri, 31 Jul 2026 15:09:57 GMT |
blind XSS vulnerability that performs actions on behalf of the ad... |
xss-vulnerability |
|
|
| Fri, 17 Apr 2026 15:39:41 GMT |
Bug Bounty 2026: Why the “End of the World� is Actually a $50... |
bounties |
|
|
| Mon, 03 Aug 2026 10:01:43 GMT |
An Exposed API Key Cost Me $4,000. Here Is Exactly What to Do To ... |
api-key |
|
|
| Mon, 25 May 2026 14:19:37 GMT |
Look at this, we created this |
bounties |
|
|
| Thu, 06 Aug 2026 12:51:08 GMT |
# Why API-First Infrastructure Is Becoming Essential for AI Agent... |
api-key |
|
|
| Mon, 27 Jul 2026 19:35:52 GMT |
AI Slop Is Drowning Bug Bounty Programs — Here’s How to Write... |
bugcrowd |
|
|
| Thu, 18 Jun 2026 11:31:01 GMT |
Broken Access Control — 2026’s #1 Bug |
bugcrowd |
|
|
| Mon, 03 Aug 2026 14:41:28 GMT |
Cap: Easy Level HackTheBox Linux Machine |
idor |
|
|
| Fri, 26 Jun 2026 06:25:44 GMT |
Costa Rica Canopy Tours: Choosing Experiences That Match Your Com... |
directory-listing |
|
|
| Mon, 11 Dec 2023 18:17:01 GMT |
Exploiting a Log Poisoning. |
log-poisoning |
|
|
| Mon, 13 Apr 2026 22:31:01 GMT |
The Cost of Trusting My Own Fingers |
bounties |
|
|
| Sat, 08 Aug 2026 19:44:06 GMT |
Bugforge Vaultly-010 |
web-security |
|
|
| Sat, 18 Jul 2026 11:40:23 GMT |
How a Scalable Code Executor Works and How I Built One |
remote-code-execution |
|
|
| Mon, 22 Jun 2026 06:51:54 GMT |
Find exposed sensitive data in AWS, Google Cloud, and other platf... |
dorks |
|
|
| Fri, 24 Jul 2026 15:52:09 GMT |
How I Found a Bug Worth $3,500 — In a Feature Nobody Was Watchi... |
file-upload |
|
|
| Thu, 28 Sep 2023 23:05:39 GMT |
Archangel — TryHackMe |
log-poisoning |
|
|
| Mon, 22 Jun 2026 17:59:47 GMT |
How I Recon a Target, Part Two: Now We Poke It |
recon |
|
|
| Wed, 22 Jul 2026 14:14:45 GMT |
How I Discovered a Critical Unauthorized Balance Top-Up Vulnerabi... |
bug-bounty-hunter |
|
|
| Thu, 20 Nov 2025 09:45:04 GMT |
Timber Doors in Surrey: Style, Durability, and Value Explained |
dorking |
|
|
| Sat, 08 Aug 2026 07:28:13 GMT |
CVE-2026–34486 Analysis — Apache Tomcat EncryptInterceptor By... |
exploit, cve |
|
|
| Sun, 26 Jul 2026 18:57:30 GMT |
The OSI Model Explained: A Cybersecurity Intern’s Guide to Unde... |
cybersecurity-tools |
|
|
| Tue, 05 Dec 2023 07:54:40 GMT |
LFI via SMTP log poisoning |
log-poisoning |
|
|
| Sat, 08 Aug 2026 06:31:01 GMT |
MariaDB CVE-2026–49261: Pre-Authentication Remote Code Executio... |
bug-bounty-writeup, cve |
|
|
| Fri, 06 Jun 2025 15:47:21 GMT |
��♂� GitHub Dorking for Bug Bounty: Hackers' Hidden Playg... |
github-dorking |
|
|
| Mon, 27 Jul 2026 08:02:41 GMT |
CVE-2025–4760: Authenticated Stored XSS Vulnerability in WSO2 A... |
xss-vulnerability |
|
|
| Fri, 05 Jun 2026 04:49:28 GMT |
Price Manipulation in Payment Gateway / Shopping Cart |
vdp |
|
|
| Fri, 08 May 2026 09:52:18 GMT |
When Bug Bounty Hunting Hit Me Back: How Losing $500 Led Me to a ... |
web-cache-poisoning |
|
|
| Wed, 05 Aug 2026 13:56:01 GMT |
Critical Alert: CVE-2026–60004 — Pre-Auth Remote Code Executi... |
remote-code-execution |
|
|
| Mon, 03 Aug 2026 09:57:12 GMT |
Penetration Testing Reports: A Section by Section Guide for Engin... |
pentest |
|
|
| Wed, 06 May 2026 11:36:01 GMT |
Google Dorking |
dorking |
|
|
| Mon, 27 Jan 2025 16:51:28 GMT |
The man who suffered 11 years in hell for freedom has now been fr... |
web-pentest |
|
|
| Sat, 25 Oct 2025 12:23:25 GMT |
How to find leaks on GitHub as a beginner. Logic is main key |
github-dorking |
|
|
| Fri, 31 Jul 2026 00:04:14 GMT |
Breaking Premium Features: Two Business Logic Vulnerabilities in ... |
hackerone |
|
|
| Thu, 06 Aug 2026 00:39:43 GMT |
Nmap Basic Port Scans (versão em português) |
pentest |
|
|
| Mon, 04 May 2026 12:56:26 GMT |
Beyond alert(1): Advanced XSS Payload Crafting, Filter Bypasses &... |
xss-bypass |
|
|
| Wed, 05 Aug 2026 23:31:46 GMT |
Bypassing a “Safe� Input Field: Reflected XSS via Unescaped H... |
xss-attack |
|
|
| Sat, 06 Dec 2025 23:06:15 GMT |
Big News from DorkFi — PreFi Rewards Drop + Contest Live! |
dorks |
|
|
| Tue, 24 Mar 2026 17:48:00 GMT |
The Ultimate Bug Bounty Course: From Zero to Advanced Hacker 1 |
bug-bounty-hunting |
|
|
| Fri, 31 Jul 2026 06:54:11 GMT |
Pentest tại Việt Nam: Doanh nghiệp thực sự cần kiểm... |
pentest |
|
|
| Wed, 24 Jun 2026 19:12:15 GMT |
The Invisible Threats: Why Logic Flaws Are Your Biggest Blind Spo... |
vulnerability-scanning |
|
|
| Tue, 23 Jun 2026 15:09:51 GMT |
Cuando el atacante encuentra más de lo que deberÃa |
vulnerability-scanning |
|
|
| Wed, 06 May 2026 11:30:53 GMT |
How Local Business Directory Listing Helps Attract Local Customer... |
directory-listing |
|
|
| Thu, 18 Jun 2026 11:52:47 GMT |
¿Usas Intercambio? |
bounty-program |
|
|
| Sat, 08 Aug 2026 15:31:54 GMT |
Search Has Escaped |
pentesting, pentest |
|
|
| Mon, 04 May 2026 17:36:51 GMT |
The Complete Guide to Managed Cyber Defense: Protecting Your Busi... |
cyber-sec |
|
|
| Thu, 06 Aug 2026 00:36:12 GMT |
VAPT Engagement Report: RootMe (TryHackMe) Unrestricted File Uplo... |
vapt |
|
|
| Fri, 13 Mar 2026 14:55:26 GMT |
Web Security Series #2 — Bypassing Authentication via MFA Tampe... |
bug-bounty-hunting |
|
|
| Sat, 01 Aug 2026 00:58:24 GMT |
How I Found and Claimed a Subdomain Takeover on cewe.kruidvat.nl |
subdomain-takeover |
|
|
| Sun, 31 May 2026 06:49:51 GMT |
Subdomain Takeover: The Silent Killer of Web Security — Tryhack... |
subdomain-takeover |
|
|
| Fri, 12 Jun 2026 12:04:09 GMT |
The Print Button That Handed Me Your Account: Stored XSS to Full ... |
xss-bypass |
|
|
| Wed, 05 Aug 2026 04:34:09 GMT |
Software Testing Fundamentals: Error, Defect, Bug, Failure, and E... |
bugs |
|
|
| Tue, 03 Feb 2026 17:12:47 GMT |
My First Week: 3 Business Logic Bugs in Major E-Commerce |
bug-bounty-program |
|
|
| Sun, 19 Jul 2026 08:09:01 GMT |
How a Simple Profile Setting Revealed Sensitive Credentials in a ... |
information-disclosure |
|
|
| Fri, 24 Jul 2026 21:06:13 GMT |
File Upload |
file-upload |
|
|
| Fri, 19 Jun 2026 20:02:36 GMT |
TryHackMe: Support Ops Platform Walkthrough |
lfi |
|
|
| Fri, 31 Jul 2026 06:27:02 GMT |
Cross-Site Scripting (XSS) Explained: The Complete Guide Every We... |
cross-site-scripting, xss-vulnerability |
|
|
| Tue, 18 Nov 2025 13:26:47 GMT |
GitHub Dorking: The Hunter’s Guide to Finding Secrets in Public... |
github-dorking |
|
|
| Sat, 25 Jul 2026 08:03:03 GMT |
How I Found 8 Vulnerabilities on an HP Student Portal |
idor |
|
|
| Fri, 07 Aug 2026 11:28:20 GMT |
From Attack Paths to Runtime Proof |
security-research |
|
|
| Wed, 17 Jun 2026 16:57:29 GMT |
Unauthenticated IDOR on NASA’s GitLab Instance — From Recon t... |
bugcrowd |
|
|
| Fri, 17 Apr 2026 04:53:23 GMT |
How I Found an Exposed Google Maps API Key on a Global Brand’s ... |
vdp |
|
|
| Mon, 03 Aug 2026 11:31:01 GMT |
The AWS Metadata Attack (IMDS) Deep Dive |
ssrf |
|
|
| Sun, 05 Apr 2026 20:11:41 GMT |
I Tried Logging In… and Accidentally Did Responsible Disclosure... |
vdp |
|
|
| Thu, 13 Feb 2025 03:29:37 GMT |
ZoomEye Meets DeepSeek: AI-Powered Cyberspace Intelligence |
zoomeye |
|
|
| Sat, 04 Apr 2026 09:10:35 GMT |
We’ve messed up, a lot. Here’s Why Scribble Still Exists to c... |
bounties |
|
|
| Fri, 31 Jul 2026 21:01:01 GMT |
How I Got My Highest Payout |
hackerone |
|
|
| Tue, 21 Apr 2026 14:42:50 GMT |
Web Security Series # 16— Exploiting Local File Inclusion (LFI) |
file-inclusion |
|
|
| Sat, 08 Aug 2026 21:11:22 GMT |
The Message You Never Sent |
vulnerability |
|
|
| Sat, 08 Aug 2026 17:44:26 GMT |
XSS2Shell: Inside the WordPress Bug That Turns a Login Into a Web... |
web-security |
|
|
| Sat, 08 Aug 2026 05:31:01 GMT |
Smali By bithowl: Chapter 5 Smali File Structure |
bug-bounty-writeup |
|
|
| Thu, 06 Aug 2026 20:28:38 GMT |
Kali CTF Writeup: Uncovering “the unbroken shelf� (OSINT) |
google-dork |
|
|
| Sat, 01 Aug 2026 07:22:16 GMT |
How IDOR/BOLA Becomes a High-Impact API Vulnerability |
idor |
|
|
| Wed, 24 Jun 2026 19:59:01 GMT |
From an Informational Finding to a Valuable Lesson: My IDOR Disco... |
bugcrowd |
|
|
| Wed, 05 Aug 2026 16:17:58 GMT |
Stop Being a Scanner Operator: Inside TrinetLayer’s Approach to... |
bug-bounty-hunter, vapt |
|
|
| Sun, 26 Jul 2026 22:55:53 GMT |
I Found 15 Critical Vulnerabilities in One Afternoon |
bug-bounty-hunter |
|
|
| Fri, 10 Jul 2026 13:08:56 GMT |
How I Found a Stored XSS Vulnerability While Testing for Self-XSS... |
security-research |
|
|
| Fri, 17 Apr 2026 19:01:54 GMT |
The Ultimate Guide to Wayback Machine Dorking for Deleted Leaks |
dorking |
|
|
| Tue, 28 Jul 2026 07:05:10 GMT |
How I found an IDOR in Google Classroom on Day 3 of my Hunting? |
idor |
|
|
| Fri, 31 Jul 2026 06:27:14 GMT |
Found a Security Vulnerability? Here’s How to Report It (with R... |
bugbounty-writeup |
|
|
| Sat, 25 Jul 2026 04:56:38 GMT |
Writeup VDP CVE-2026–42031 (CKAN SQLI & Autherization bypass) d... |
vdp |
|
|
| Thu, 23 Jul 2026 02:02:42 GMT |
Windows and Linux Sensitive Directory Path Summary |
exploit |
|
|
| Fri, 31 Jul 2026 22:19:00 GMT |
PortSwigger Lab Write-up: SSRF with Blacklist-Based Input Filter |
ssrf |
|
|
| Sun, 15 Feb 2026 09:26:13 GMT |
TryHackMe Walkthrough -Subdomain Enumeration |
subdomain-enumeration |
|
|
| Sat, 09 May 2026 10:01:40 GMT |
Shodan.io | TryHackMe |
shodan |
|
|
| Thu, 06 Aug 2026 10:18:04 GMT |
Why Modern VAPT Is Essential for Defending Against Advanced Cyber... |
vapt |
|
|
| Sat, 20 Dec 2025 18:21:40 GMT |
N0aziXss SubSpectre: Advanced Subdomain Discovery with Intelligen... |
subdomain-enumeration |
|
|
| Fri, 07 Aug 2026 06:27:28 GMT |
Finding SQL Injection in a Government Website |
bug-bounty-tips |
|
|
| Wed, 15 Jul 2026 12:56:40 GMT |
I Just Wanted a Cold Coffee. Instead I Found a Master Key to a Ve... |
vdp |
|
|
| Tue, 28 Jul 2026 14:51:38 GMT |
Lab Solved: File Path Traversal — Absolute Path Bypass |
information-disclosure |
|
|
| Fri, 24 Jul 2026 14:42:15 GMT |
The Payload Was Never the Problem |
rce |
|
|
| Wed, 18 Mar 2026 10:03:26 GMT |
Web Security Series #7 — Exploiting Blind SQL Injection via Ses... |
bug-bounty-hunting |
|
|
| Thu, 06 Aug 2026 07:39:53 GMT |
Superteam CTF v2: A Beginner’s Journey into Solana Security |
security-research |
|
|
| Wed, 05 Aug 2026 22:36:52 GMT |
The Hollow Shell | Hacker Holidays Day 10 | TryHackMe Writeup |
local-file-inclusion |
|
|
| Sun, 26 Jul 2026 10:43:57 GMT |
XSS | Cross Site Scripting |
xss-vulnerability |
|
|
| Sat, 08 Aug 2026 08:11:11 GMT |
Bypassing Filters to Achieve UNION-Based SQL Injection on a Searc... |
bug-bounty-tips, bug-bounty-writeup |
|
|
| Tue, 04 Aug 2026 14:43:58 GMT |
Server-Side Request Forgery (SSRF) to Local File Read: A Deep Div... |
ssrf |
|
|
| Sat, 08 Aug 2026 05:31:01 GMT |
When Your AI Defender Becomes the Attack Surface |
security-research |
|
|
| Fri, 28 Jun 2024 14:51:14 GMT |
X-Forwarded HTTP header-ləri : Qısa izah |
log-poisoning |
|
|
| Sat, 08 Aug 2026 22:18:37 GMT |
Webverse-Pro ClockedOut |
web-security |
|
|
| Fri, 07 Aug 2026 10:02:06 GMT |
How to Build a Recon Workflow That Actually Finds Bugs (Not Just ... |
bug-bounty-tips, bug-bounty-writeup |
|
|
| Thu, 09 Oct 2025 18:33:05 GMT |
0-click Account Takeover via Punycode |
bug-bounty-program |
|
|
| Mon, 03 Aug 2026 20:29:20 GMT |
Sublist3r |
subdomain-enumeration |
|
|
| Sat, 18 Jul 2026 19:00:12 GMT |
XSS Bypass — The Hackers Labs |
xss-bypass |
|
|
| Wed, 05 Aug 2026 21:26:04 GMT |
CVE-2026–69258: Flowise Patched overrideConfig. I Found the Two... |
cve |
|
|
| Sat, 04 Jul 2026 14:47:14 GMT |
AI is built into apps now. What does that mean for data security? |
cyber-sec |
|
|
| Wed, 11 Feb 2026 21:37:40 GMT |
From Course Notes to CVE: How a GXPN Study Session Uncovered a 40... |
vulnerability-disclosure |
|
|
| Sun, 26 Jul 2026 02:39:37 GMT |
Building Temporary File Sharing That Actually Expires |
file-upload |
|
|
| Thu, 04 Dec 2025 04:45:36 GMT |
What is Google Dorking? |
dorking |
|
|
| Sun, 02 Aug 2026 11:38:51 GMT |
Ollama’dan API Key Nasıl Alınır (2026) |
api-key |
|
|
| Wed, 20 May 2026 11:18:33 GMT |
Me Before Digiss vs Me Now in Digiss: How My Cybersecurity Learni... |
cyber-sec |
|
|