| Sun, 19 Jul 2026 23:22:32 GMT |
Vulnhub: Dawn Walkthrough |
cybersecurity, penetration-testing, infosec, ethical-hacking |
Yes |
|
| Sun, 19 Jul 2026 23:31:01 GMT |
Why Cybersecurity Is Becoming a Race Against Time, Not Just Again... |
cybersecurity |
Yes |
|
| Thu, 11 Jun 2026 04:44:15 GMT |
AtDork dorking tools |
google-dork |
|
|
| Thu, 02 Jul 2026 05:01:30 GMT |
The Midnight Exam: How I Secured Russia’s Night Raid Academy |
vdp |
|
|
| Wed, 23 Jul 2025 15:15:01 GMT |
TryHackMe Include walkthrough: SSRF, log poisoning & LFI2RCE, wit... |
log-poisoning |
|
|
| Mon, 29 Jun 2026 06:52:04 GMT |
My First Cross-Site Scripting (XSS) Vulnerability: A Journey of P... |
xss-bypass |
|
|
| Sun, 19 Jul 2026 06:07:29 GMT |
The Cursor Zero-Day That Sat Through 70 Versions |
bug-bounty |
|
|
| Fri, 12 Jun 2026 10:04:19 GMT |
ATDORK |
google-dork |
|
|
| Mon, 13 Jul 2026 11:04:30 GMT |
Cache Poisoning: From Cache Hits to Bounty |
web-cache-poisoning |
|
|
| Sat, 18 Jul 2026 09:07:12 GMT |
wp2shell: The WordPress Core Flaw That Turns an Anonymous Request... |
remote-code-execution |
|
|
| Sun, 19 Jul 2026 08:03:29 GMT |
Network VAPT Approaches in 2026: How I Stopped Trusting My Scanne... |
vapt |
|
|
| Sun, 12 Jul 2026 02:55:50 GMT |
DOM XSS in AngularJS expression with angle brackets and double qu... |
xss-vulnerability |
|
|
| Sun, 19 Jul 2026 06:38:56 GMT |
Active Directory Attacks — Coercion |
pentesting |
|
|
| Tue, 23 Jun 2026 17:44:04 GMT |
Still Doing Recon Manually? You’re Wasting Time — Recon Smart... |
bug-bounty-hunter |
|
|
| Fri, 17 Jul 2026 00:49:39 GMT |
Malware Analysis and Domain Investigation: Following the Trail fr... |
cybersecurity-tools |
|
|
| Mon, 08 Jun 2026 09:48:02 GMT |
XSS WAF Bypass: The Ultimate Deep Dive |
xss-bypass |
|
|
| Sun, 19 Jul 2026 17:17:20 GMT |
Hacking the Human Mind |
hacking, ethical-hacking |
|
|
| Thu, 30 Apr 2026 15:04:04 GMT |
I Almost Scrolled Past This URL… Then I Got Curious |
lfi |
|
|
| Sun, 12 Jul 2026 01:21:50 GMT |
XSS as a Password Stealer : A very overlooked XSS attack vector |
xss-attack, cross-site-scripting |
|
|
| Mon, 27 Jan 2025 16:51:28 GMT |
The man who suffered 11 years in hell for freedom has now been fr... |
web-pentest |
|
|
| Wed, 16 Jul 2025 12:07:42 GMT |
Hackers Love This 1979 Protocol (Because It Can’t Defend Itself... |
censys |
|
|
| Sun, 19 Jul 2026 19:07:02 GMT |
Team Rocket Came Back Again, Phase 2 Ended, and I started to lear... |
security |
|
|
| Wed, 15 Jul 2026 20:00:20 GMT |
Stop Buying Cleaning Spray — Do This Instead For generation... |
bugs |
|
|
| Sat, 04 Jul 2026 10:36:33 GMT |
Basic Pentesting: 2 |
pentest |
|
|
| Sat, 11 Jul 2026 12:55:00 GMT |
How to Replace AWS S3 with MinIO in Development (Without Changing... |
file-upload |
|
|
| Wed, 12 Feb 2025 22:46:35 GMT |
https://www.express.co.uk/life-style/property/2012927/cleaning-ch... |
web-pentest |
|
|
| Tue, 07 Jul 2026 05:50:15 GMT |
How to Get USCSI® Certified: A Step-by-Step Guide |
cybersecurity-tools |
|
|
| Sat, 18 Jul 2026 16:49:44 GMT |
WordPress REST API Security: Why Unauthenticated RCE Risks Demand... |
web-security |
|
|
| Sun, 19 Jul 2026 03:45:44 GMT |
AI-Generated Code Needs Security Too: Here’s My Approach |
application-security |
|
|
| Mon, 18 May 2026 14:37:14 GMT |
File Inclusion - Challenge Part | TryHackMe Walkthrough |
file-inclusion |
|
|
| Thu, 02 Jul 2026 15:36:00 GMT |
How I Found a Local File Inclusion in DHL |
security-research |
|
|
| Thu, 13 Feb 2025 03:29:37 GMT |
ZoomEye Meets DeepSeek: AI-Powered Cyberspace Intelligence |
zoomeye |
|
|
| Thu, 09 Jul 2026 12:43:47 GMT |
The Easy Bug Series | #01 |
bounty-program |
|
|
| Sat, 04 Apr 2026 09:10:35 GMT |
We’ve messed up, a lot. Here’s Why Scribble Still Exists to c... |
bounties |
|
|
| Sun, 19 Jul 2026 07:04:41 GMT |
My PAPA (Practical AI Pentest Associate) Review |
pentesting |
|
|
| Tue, 10 Feb 2026 23:04:46 GMT |
Effective Dorking Tools |
dorking |
|
|
| Fri, 08 May 2026 22:01:34 GMT |
AI Is Breaking the Two Rules That Kept the Internet Safe — And ... |
vulnerability-disclosure |
|
|
| Sat, 18 Jul 2026 16:21:01 GMT |
Guide Presents Best Cybersecurity Investments for Small Business ... |
cybersecurity-tools |
|
|
| Mon, 22 Jun 2026 07:48:39 GMT |
Still Confused by Amass or Can’t Understand Its Results, This I... |
recon |
|
|
| Mon, 13 Apr 2026 03:31:01 GMT |
Google Dorks Google Ko Bana Do Apna Hacking Tool: Free Mein Bugs ... |
github-dorking |
|
|
| Mon, 29 Jun 2026 04:40:40 GMT |
We Stopped Vulnerable Code from Reaching Production with Snyk. He... |
vulnerability-scanning |
|
|
| Sun, 07 Jun 2026 18:38:23 GMT |
Visualizing Physical Attack Surface Exposure with Python, WiGLE, ... |
shodan |
|
|
| Sun, 19 Jul 2026 10:56:15 GMT |
Broken Access Control: How Attackers Bypass Permissions (And How ... |
bug-bounty |
|
|
| Mon, 29 Jun 2026 11:44:13 GMT |
Cybersecurity Practice Lab 3 |
cross-site-scripting |
|
|
| Sun, 19 Jul 2026 21:09:05 GMT |
Chantage sexuel (sextorsion) sur Tinder et WhatsApp : guide compl... |
cybersecurity |
|
|
| Sun, 19 Jul 2026 16:27:42 GMT |
Day 13: Detection Engineering — Turning Attacker Behavior Into ... |
ethical-hacking |
|
|
| Fri, 26 Jun 2026 17:34:18 GMT |
The Ultimate Guide to Embroidery Machine File Formats |
file-upload |
|
|
| Sun, 19 Jul 2026 06:08:56 GMT |
When JPEGs Start Giving Orders: A Journey into Multi-modal Prompt... |
bug-bounty, pentesting |
|
|
| Sun, 19 Jul 2026 21:34:24 GMT |
A login isn’t enough: what happens after a doctor signs in? |
security |
|
|
| Fri, 28 Jun 2024 14:51:14 GMT |
X-Forwarded HTTP header-ləri : Qısa izah |
log-poisoning |
|
|
| Tue, 22 Apr 2025 10:38:20 GMT |
Trump’s Tariffs Cut Out Censys — ZoomEye Steps In Strong! |
zoomeye |
|
|
| Sun, 14 Dec 2025 06:37:06 GMT |
My Bug Bounty Diary |
subdomain-enumeration |
|
|
| Tue, 14 Jul 2026 16:44:08 GMT |
TuesdayTool 48: OSINTLeak — A Modern OSINT Platform for Digital... |
cybersecurity-tools |
|
|
| Tue, 30 Jun 2026 18:34:40 GMT |
TuesdayTool 47: AMASS — Discovering Your Hidden Attack Surface ... |
cybersecurity-tools |
|
|
| Fri, 10 Jul 2026 21:08:54 GMT |
“screenshot� | CyberTalents | Bypass SSRF filters using PHP... |
ssrf |
|
|
| Sun, 19 Jul 2026 12:00:58 GMT |
Account Takeover via Broken Password Reset Validation |
bug-bounty, bug-bounty-tips, bug-bounty-writeup |
|
|
| Fri, 06 Feb 2026 06:33:08 GMT |
5 Ways to Bypass Email Verification Without Using Any Tool |
bug-bounty-program |
|
|
| Sat, 25 Oct 2025 12:23:25 GMT |
How to find leaks on GitHub as a beginner. Logic is main key |
github-dorking |
|
|
| Fri, 10 Jul 2026 00:24:26 GMT |
Stored DOM XSS — PortSwingger |
xss-vulnerability |
|
|
| Sat, 18 Jul 2026 16:27:41 GMT |
The Walls I Built Up |
vulnerability |
|
|
| Wed, 15 Jul 2026 11:30:22 GMT |
TryHackMe | Google Dorking |
google-dorking |
|
|
| Wed, 15 Jul 2026 15:14:54 GMT |
The Endpoint Everyone Ignored Just Took Down a Server |
hackerone |
|
|
| Wed, 15 Jul 2026 12:56:40 GMT |
I Just Wanted a Cold Coffee. Instead I Found a Master Key to a Ve... |
vdp |
|
|
| Sun, 15 Feb 2026 09:26:13 GMT |
TryHackMe Walkthrough -Subdomain Enumeration |
subdomain-enumeration |
|
|
| Thu, 18 Jun 2026 11:31:01 GMT |
Broken Access Control — 2026’s #1 Bug |
bugcrowd |
|
|
| Sat, 18 Jul 2026 19:31:01 GMT |
When XSS Meets CSRF |
bug-bounty-writeup |
|
|
| Sat, 30 May 2026 18:19:20 GMT |
Admin Dashboard Accessible Without Authentication |
vulnerability-disclosure |
|
|
| Mon, 11 Dec 2023 18:17:01 GMT |
Exploiting a Log Poisoning. |
log-poisoning |
|
|
| Sun, 19 Jul 2026 09:44:12 GMT |
Tech Branding Agency in Mumbai: Building Powerful Technology Bran... |
information-technology |
|
|
| Sat, 18 Jul 2026 00:05:18 GMT |
Breaking the iframes: Modern Clickjacking Attacks Explained |
bug-bounty-tips, bug-bounty-writeup |
|
|
| Sat, 18 Jul 2026 00:00:58 GMT |
I Found 400 Hidden Subdomains On My First Target Using One Free T... |
bug-bounty-tips |
|
|
| Fri, 17 Jul 2026 06:20:03 GMT |
When -1 Crossed a Library Boundary: How libvips Hardened Its TIFF... |
cve |
|
|
| Thu, 25 Jun 2026 15:42:57 GMT |
Thm Room —Intro to Cross-Site Scripting |
cross-site-scripting |
|
|
| Wed, 15 Jul 2026 09:47:21 GMT |
Organization Without Owner |
hackerone |
|
|
| Wed, 01 Jul 2026 05:23:05 GMT |
Broken Authentication Vulnerability That Allowed Unauthorized Use... |
bugcrowd |
|
|
| Wed, 24 Jun 2026 11:31:00 GMT |
CSRF Explained Like You’re Five |
bugcrowd |
|
|
| Tue, 19 May 2026 14:13:53 GMT |
Guildford to Box Hill |
dorking |
|
|
| Sun, 05 Jul 2026 11:31:00 GMT |
Google Dorking for Bug Hunters |
google-dork |
|
|
| Sun, 19 Jul 2026 16:12:58 GMT |
What Happens to Your Data After a Company Gets Hacked? (It’s Wo... |
hacking, information-technology |
|
|
| Sun, 19 Jul 2026 20:01:51 GMT |
TryHackMe Nmap Live Host Discovery (versão em português) |
pentesting, pentest |
|
|
| Tue, 18 Nov 2025 13:26:47 GMT |
GitHub Dorking: The Hunter’s Guide to Finding Secrets in Public... |
github-dorking |
|
|
| Sun, 14 Jun 2026 13:21:02 GMT |
Subdomain Enumeration: A Core Technique Every Bug Hunter Must Mas... |
subdomain-enumeration, recon |
|
|
| Tue, 14 Jul 2026 02:38:44 GMT |
What Is YARA? The Tool Security Researchers Use to Spot Malware P... |
cybersecurity-tools |
|
|
| Thu, 16 Jul 2026 09:29:01 GMT |
Deepseek’den Api Key Nasıl Alınır (2026) |
api-key |
|
|
| Tue, 23 Jun 2026 11:42:13 GMT |
Where Are You Storing Your API Keys? (And Why Slack Isn’t It) |
api-key |
|
|
| Tue, 05 May 2026 09:32:07 GMT |
Google Dorks — Advanced Search |
google-dork |
|
|
| Mon, 25 May 2026 22:43:37 GMT |
Support Writeup for Jr.Pentester Path — TryHackMe/THM |
local-file-inclusion |
|
|
| Fri, 12 Jun 2026 12:04:09 GMT |
The Print Button That Handed Me Your Account: Stored XSS to Full ... |
xss-bypass |
|
|
| Tue, 14 Apr 2026 13:07:05 GMT |
My “Gemini� Is Named Mike |
dorks |
|
|
| Tue, 11 Nov 2025 16:43:14 GMT |
Beyond Google: Navigating the Hidden Internet with Shodan and Cen... |
censys |
|
|
| Sun, 19 Jul 2026 07:25:41 GMT |
How I Found a Race Condition in an Email Verification Feature |
bug-bounty, penetration-testing, bug-bounty-writeup |
|
|
| Sun, 12 Jul 2026 11:54:51 GMT |
Lab: Authentication bypass via information disclosure (Informatio... |
information-disclosure |
|
|
| Sun, 21 Sep 2025 07:02:30 GMT |
Affordable but Vulnerable? The Dark Side of CMORE HMI |
censys |
|
|
| Tue, 16 Jun 2026 13:11:36 GMT |
Understanding Web Cache Poisoning via Unkeyed Headers: A PortSwig... |
web-cache-poisoning |
|
|
| Fri, 10 Nov 2023 03:38:01 GMT |
Apache error.log advanced Log poisoning RCE |
log-poisoning |
|
|
| Fri, 29 May 2026 17:22:37 GMT |
Cracking SameSite for a $2,000 Web Cache Deception |
web-cache-poisoning |
|
|
| Fri, 12 Jun 2026 21:45:49 GMT |
TryHackMe Walkthrough: Support |
local-file-inclusion |
|
|
| Sun, 19 Jul 2026 20:39:52 GMT |
Chaining IDOR and Command Injection to Fully Own HwatNetOps |
idor |
|
|
| Thu, 07 May 2026 06:41:01 GMT |
Github Dorking |
dorking, github-dorking |
|
|
| Sun, 12 Jul 2026 11:04:39 GMT |
Lab: Source code disclosure via backup files (Information Disclos... |
information-disclosure |
|
|
| Wed, 03 Jun 2026 15:20:33 GMT |
Most Businesses in Costa Rica Are Easier to Find Than You Think, ... |
directory-listing |
|
|
| Sat, 04 Jul 2026 14:44:26 GMT |
Behind the Screen Name: Cybersecurity in |
cyber-sec |
|
|
| Sun, 19 Jul 2026 13:18:37 GMT |
Hot Take: Signature-Based Security Is Officially Dead — AI Just... |
hacking, ethical-hacking |
|
|
| Tue, 17 Mar 2026 09:18:53 GMT |
Web Security Series #6 — Exploiting SQL Injection to Extract Se... |
bug-bounty-hunting |
|
|
| Sun, 19 Jul 2026 18:05:14 GMT |
From Kali365 to a Wider Device-Code Phishing Ecosystem: A Webamon... |
cyber-security-awareness |
|
|
| Fri, 13 Mar 2026 14:55:26 GMT |
Web Security Series #2 — Bypassing Authentication via MFA Tampe... |
bug-bounty-hunting |
|
|
| Wed, 15 Jul 2026 17:34:03 GMT |
SSRF in Simple | Server Side Request Forgery | Cybersecurity Le... |
ssrf |
|
|
| Wed, 08 Jul 2026 10:12:49 GMT |
Deep Dive into Modern Web Vulnerabilities: Advanced API Exploitat... |
ssrf |
|
|
| Sat, 09 May 2026 02:26:22 GMT |
How I Discovered a Reflected XSS Vulnerability on a Major German ... |
xss-bypass |
|
|
| Sun, 19 Jul 2026 09:38:45 GMT |
How Shodan Maps the Entire Internet — And What That Means for Y... |
penetration-testing, shodan |
|
|
| Sun, 19 Jul 2026 11:25:44 GMT |
Best Ethical Hacking Training in Noida | Ducat India |
ethical-hacking |
|
|
| Sun, 19 Jul 2026 16:52:51 GMT |
Simplifying Python Web Scraping with Playwright |
penetration-testing |
|
|
| Mon, 13 Jul 2026 09:49:39 GMT |
Why “In QA� Isn’t Always the Right Status |
bugs |
|
|
| Sat, 25 Apr 2026 14:46:05 GMT |
File Inclusion— Skills Assesment (HTB) |
file-inclusion |
|
|
| Sun, 19 Jul 2026 11:26:40 GMT |
Academy Lab WalkThrough — A Complete Penetration Testing Guide |
vulnerability |
|
|
| Sun, 19 Jul 2026 22:52:13 GMT |
Hide Loaded Modules in Remote Processes |
cybersecurity, hacking, infosec, pentesting |
|
|
| Sat, 18 Jul 2026 22:56:07 GMT |
Introducing OathNet: Stealer Logs, Breach Data and Connected Inte... |
information-security |
|
|
| Sun, 19 Jul 2026 19:30:09 GMT |
Login Security Testing Checklist |
application-security, bug-bounty-hunting |
|
|
| Wed, 27 May 2026 08:42:26 GMT |
Open Source Transparency Was a Moat — AI Is Turning It Into a L... |
vulnerability-disclosure |
|
|
| Tue, 02 Jun 2026 19:48:50 GMT |
From False Positive to Hall of Fame: Exploiting Web Cache Poisoni... |
web-cache-poisoning |
|
|
| Fri, 17 Jul 2026 05:47:51 GMT |
A 65,529-Sample Lie: How a Tiny TIFF Fooled GDAL Into Asking for ... |
cve |
|
|
| Sun, 19 Jul 2026 06:02:01 GMT |
“Prompt Engineering Is Dead,� Everyone Says — They Are Wron... |
information-technology |
|
|
| Sun, 19 Jul 2026 11:26:02 GMT |
HTTP Security Headers: The Complete 2026 Guide with nginx & Apach... |
web-security |
|
|
| Sat, 18 Jul 2026 13:34:58 GMT |
OWASP Top 10: What Every Developer Should Actually Know |
web-security |
|
|
| Tue, 07 Jul 2026 09:20:14 GMT |
The Path of the Serpent: How I Turned a P5 Open Redirect into a ... |
rce |
|
|
| Sun, 19 Jul 2026 15:22:38 GMT |
Pre-Engagement |
cyber-security-awareness |
|
|
| Wed, 15 Jul 2026 20:16:01 GMT |
A Worm Just Forged a Valid Security Attestation. |
cve |
|
|
| Sun, 19 Jul 2026 10:58:34 GMT |
Authentication Bypass: Breaking the Login Itself |
pentesting, vapt |
|
|
| Sun, 19 Jul 2026 09:53:31 GMT |
How Anthropic Could Have Prevented the “Claude Gift Fraud� Wi... |
application-security |
|
|
| Sat, 04 Jul 2026 15:01:30 GMT |
Sistemin Anahtarını Ele Geçirmek: RCE Injection ve Gelişmiş ... |
rce, remote-code-execution |
|
|
| Fri, 03 Jul 2026 19:09:36 GMT |
CVE_2026_44963 Veeam RCE |
rce |
|
|
| Wed, 08 Jul 2026 22:58:24 GMT |
SAP Penetration Testing Guide |
pentest |
|
|
| Wed, 22 Apr 2026 23:39:11 GMT |
Authentication bypass via unauthenticated JWT generation on a tel... |
shodan |
|
|
| Tue, 15 Jul 2025 12:15:58 GMT |
“Secure� OPC UA Setups Are Being Hacked — Here’s Why |
censys |
|
|
| Sun, 19 Jul 2026 06:14:23 GMT |
Network Security Essentials |
infosec, cyber-security-awareness |
|
|
| Thu, 16 Jul 2026 04:28:38 GMT |
How to Install GAU (GetAllURLs) Tool on Kali Linux — Complete G... |
hackerone, bugcrowd |
|
|
| Sat, 30 May 2026 11:25:12 GMT |
Cross-Site Scripting (XSS) via Client-Side Filter Bypass |
xss-bypass |
|
|
| Fri, 03 Jul 2026 13:17:38 GMT |
Unauthenticated Stored XSS in NEX-Forms Express WP Form Builder (... |
security-research |
|
|
| Sat, 18 Jul 2026 12:28:14 GMT |
What is Docker Hardened Images and Why should you use it? |
cve |
|
|
| Sun, 19 Jul 2026 00:44:13 GMT |
Welcome to the Passive Reconnaissance room. |
pentesting |
|
|
| Sat, 18 Jul 2026 14:27:22 GMT |
From Git Rebase to Remote Code Execution: An Unpatched Argument I... |
remote-code-execution |
|
|
| Fri, 17 Jul 2026 02:32:13 GMT |
Your AI Agent Has Browser, Filesystem, and Terminal Access. Whoâ€... |
application-security |
|
|
| Sat, 18 Jul 2026 17:21:11 GMT |
The 2026 Security Review: Auditing the 92e Mobile Platform |
information-security |
|
|
| Fri, 17 Jul 2026 17:05:53 GMT |
[POC] Cara Saya Menemukan Celah User Enumeration & Missing Rate... |
bug-bounty-writeup |
|
|
| Thu, 09 Jul 2026 19:09:36 GMT |
Engineering a Zero-Trust Document Upload Pipeline: Implementing C... |
file-upload |
|
|
| Thu, 11 Jun 2026 05:41:48 GMT |
Shodan: The Search Engine Hackers Don’t Want You to Know About |
shodan |
|
|
| Tue, 14 Jul 2026 11:11:49 GMT |
Exposing the Shadowy World of Student Proxy Exploits: 148 npm Pac... |
exploit |
|
|
| Wed, 15 Jul 2026 02:01:03 GMT |
��脅情資】從 Java RCE 到內網橫�：��� Defend... |
rce |
|
|
| Wed, 18 Mar 2026 10:03:26 GMT |
Web Security Series #7 — Exploiting Blind SQL Injection via Ses... |
bug-bounty-hunting |
|
|
| Sat, 18 Jul 2026 10:10:19 GMT |
HACKING JULY DAY 16: VULN-BANK EXPLOITATION #3 |
idor |
|
|
| Wed, 10 Jun 2026 08:19:20 GMT |
How I Dealt with an Exposed API Key on GitHub |
api-key |
|
|
| Sun, 19 Jul 2026 12:20:00 GMT |
How Hackers Get Caught: Inside a Real Email Investigation (2026) |
infosec |
|
|
| Sat, 13 Jun 2026 15:28:09 GMT |
Cómo detectar sitios gubernamentales comprometidos con Spam SEO ... |
google-dork |
|
|
| Sat, 04 Jul 2026 06:12:12 GMT |
How I Discovered a Critical Data Leak Starting with a Small Clue |
bug-bounty-hunter |
|
|
| Fri, 08 May 2026 09:52:18 GMT |
When Bug Bounty Hunting Hit Me Back: How Losing $500 Led Me to a ... |
web-cache-poisoning |
|
|
| Sat, 18 Jul 2026 14:51:28 GMT |
It Worked, Then It Didn’t, Then I Understood Why: A Bug Bounty ... |
bug-bounty-writeup |
|
|
| Tue, 07 Jul 2026 06:16:01 GMT |
How to Report Bugs & Earn PIF Rewards On TheBenefactor.Net |
bug-bounty-hunter |
|
|
| Wed, 15 Jul 2026 12:40:12 GMT |
UMANG App Vulnerability: Why Responsible Disclosure Matters More ... |
vapt |
|
|
| Sun, 12 Jul 2026 21:01:01 GMT |
Why move_uploaded_file() Doesn't Validate Anything You Think It D... |
file-upload |
|
|
| Fri, 10 Jul 2026 03:06:06 GMT |
I Attacked a Vulnerable Web App and Then Fixed It — A Security ... |
cross-site-scripting |
|
|
| Thu, 09 Jul 2026 23:38:38 GMT |
AtDork 1.3.9.6? 180,000 Dorks free open source |
google-dork, dorks |
|
|
| Fri, 17 Jul 2026 02:43:20 GMT |
APKLeaks: A Mobile Security Tool |
vapt |
|
|
| Fri, 03 Jul 2026 15:01:17 GMT |
AI Skills Developers Must Learn in 2026: Practical Roadmap, Tools... |
api-key |
|
|
| Sun, 19 Jul 2026 16:23:04 GMT |
I Analyzed 50 Leaked Password Lists. Here’s What Terrified Me |
security |
|
|
| Sun, 19 Jul 2026 08:20:01 GMT |
Your Small Business Website Is Probably Being Attacked Right Now ... |
web-security |
|
|
| Mon, 22 Jun 2026 01:55:36 GMT |
PortSwigger : Stored XSS into Anchor href Attribute with Double Q... |
cross-site-scripting |
|
|
| Sun, 19 Jul 2026 09:05:37 GMT |
The Code Was Fine. The Access Model Was Not. |
application-security |
|
|
| Tue, 14 Jul 2026 09:31:20 GMT |
How Convenience Over Security Exposed 160K+ Citizens: An IDOR Bre... |
idor |
|
|
| Sat, 11 Jul 2026 07:14:07 GMT |
From Hidden API to Paywall Bypass: Finding an Authorization Vulne... |
idor |
|
|
| Fri, 10 Jul 2026 19:19:48 GMT |
From a 100 MB Error to Git LFS: What I Learned |
file-upload |
|
|
| Sun, 19 Jul 2026 21:37:42 GMT |
The Damage I’ve Caused: Why Being Always Available Hurts Your T... |
cybersecurity |
|
|
| Sun, 19 Jul 2026 05:54:54 GMT |
Everyone Is Talking About AI — Here’s How You Can Build a Bus... |
information-technology |
|
|
| Sun, 19 Jul 2026 14:37:18 GMT |
Penetration Testing Process |
penetration-testing |
|
|
| Sat, 18 Jul 2026 14:30:16 GMT |
Prompt Injection Is Just SSRF for Text | MCP Security → Part 3 |
bug-bounty-tips, ssrf |
|
|
| Sun, 19 Jul 2026 06:39:29 GMT |
Active Directory Attacks — gMSA exploitation |
pentesting |
|
|
| Sun, 19 Jul 2026 17:17:05 GMT |
The Illusion of Prompt-Based Security: Exploiting Broken Object-L... |
information-security |
|
|
| Thu, 09 Oct 2025 18:33:05 GMT |
0-click Account Takeover via Punycode |
bug-bounty-program |
|
|
| Sat, 04 Jul 2026 04:40:06 GMT |
The Festival Phantom: How I Found a Ghost in Germany’s Anubis ... |
vdp |
|
|
| Sun, 19 Jul 2026 08:09:01 GMT |
How a Simple Profile Setting Revealed Sensitive Credentials in a ... |
bug-bounty, penetration-testing, bugbounty-writeup, information-disclosure |
|
|
| Sun, 19 Jul 2026 17:58:40 GMT |
360° Security Approach: Why Modern Organizations Need Integrated... |
security |
|
|
| Tue, 30 Jun 2026 11:31:00 GMT |
Subdomain Takeover — Claiming Forgotten Assets |
subdomain-takeover |
|
|
| Fri, 17 Jul 2026 16:56:29 GMT |
CTF: Archangel TryhackMe Room |
local-file-inclusion |
|
|
| Thu, 09 Jul 2026 11:31:00 GMT |
How I Found My First Critical Bug (An IDOR Story) |
idor |
|
|
| Thu, 25 Jun 2026 22:23:14 GMT |
PortSwigger : Reflected XSS into Attribute with Angle Brackets HT... |
cross-site-scripting |
|
|
| Fri, 01 May 2026 09:40:56 GMT |
Excessive Data Exposure Leading to Unauthorized Access to Paid Fe... |
vulnerability-disclosure |
|
|
| Sat, 18 Jul 2026 13:42:58 GMT |
Experimental Confirmation of CVE-2026–25262 on Snapdragon 8 Gen... |
security-research |
|
|
| Mon, 13 Apr 2026 22:31:01 GMT |
The Cost of Trusting My Own Fingers |
bounties |
|
|
| Wed, 17 Jun 2026 19:02:16 GMT |
TryHackMe Lo-Fi Writeup |
lfi |
|
|
| Wed, 01 Jul 2026 11:07:22 GMT |
Archangel TryHackMe Walkthrough | LFI, Log Poisoning & Linux Pri... |
local-file-inclusion |
|
|
| Sat, 06 Dec 2025 23:06:15 GMT |
Big News from DorkFi — PreFi Rewards Drop + Contest Live! |
dorks |
|
|
| Sun, 19 Jul 2026 01:56:01 GMT |
External Pentest: Uçtan Uca Recon Workflow |
pentesting |
|
|
| Sun, 14 Jun 2026 12:09:22 GMT |
How a Simple Google Dork Earned Me My First Bounty from Bugcrowdâ... |
bugcrowd |
|
|
| Thu, 16 Jul 2026 12:20:24 GMT |
Smali By bithowl: Chapter 2 Why Every Android Hacker Needs Smali |
bugbounty-writeup |
|
|
| Thu, 09 Jul 2026 08:16:01 GMT |
Bug Bounty — Bypassing Access Controls: How a Single Boolean Fl... |
bug-bounty-hunter |
|
|
| Sun, 26 Apr 2026 16:31:24 GMT |
��♂� How I Find Critical Data Leaks Using Just Google Sea... |
google-dork |
|
|
| Mon, 22 Jun 2026 06:51:54 GMT |
Find exposed sensitive data in AWS, Google Cloud, and other platf... |
dorks |
|
|
| Sun, 19 Jul 2026 14:05:15 GMT |
Love Letters |
vulnerability |
|
|
| Sun, 19 Jul 2026 16:46:34 GMT |
Rocket : HTB |
hacking |
|
|
| Tue, 16 Jun 2026 04:26:17 GMT |
How to Install Nuclei on Your Machine The Open-Source Vulnerabili... |
vulnerability-scanning |
|
|
| Fri, 10 Jul 2026 15:09:02 GMT |
Two AI Concepts That Were Much Simpler Than I Expected |
api-key |
|
|
| Thu, 28 May 2026 16:33:00 GMT |
CONTENT DISCOVERY-TRYHACKME WALKTHROUGH |
google-dorking |
|
|
| Tue, 14 Jul 2026 08:38:02 GMT |
Infrastructure Takeover: How Leaked MailWizz API Keys Allowed Byp... |
information-disclosure |
|
|
| Sat, 14 Mar 2026 18:06:12 GMT |
Web Security Series #3 — Discovering Credentials Using Cluster ... |
bug-bounty-hunting |
|
|
| Tue, 14 Jul 2026 19:59:03 GMT |
LetsDefend: SOC169 — Possible IDOR Attack Detected (Walkthrough... |
idor |
|
|
| Fri, 10 Jul 2026 09:31:00 GMT |
From PortSwigger Labs to my First Real-World Bounty: How a Stored... |
xss-vulnerability |
|
|
| Mon, 22 Jun 2026 17:59:47 GMT |
How I Recon a Target, Part Two: Now We Poke It |
recon |
|
|
| Sun, 19 Jul 2026 14:51:45 GMT |
OverTheWire Bandit Walkthrough — Level 31 → 32 | 30-Day Cybe... |
information-technology |
|
|
| Mon, 06 Jul 2026 09:03:08 GMT |
CVE-2025–43807: Stored Cross-Site Scripting (XSS) Vulnerability... |
cross-site-scripting |
|
|
| Wed, 29 Apr 2026 14:14:58 GMT |
Part 2Â : Cross-Site Scripting (XSS) |
xss-bypass |
|
|
| Tue, 30 Jun 2026 09:45:39 GMT |
Why I Rejected Existing Hacking Tools to Program My Own |
cybersecurity-tools |
|
|
| Thu, 09 Jul 2026 21:27:37 GMT |
TryHackMe Protocols and Servers 2 (versão em português) |
pentest |
|
|
| Sun, 12 Jul 2026 16:33:11 GMT |
Understanding Host Header Injection |
xss-vulnerability |
|
|
| Mon, 04 May 2026 14:48:00 GMT |
I Found 150+ Vulnerabilities in DeFi Protocols. Here’s Why I C... |
bounties |
|
|
| Wed, 13 May 2026 23:11:19 GMT |
The Lethal Trifecta: How AI Agents With Tool Access Turn Prompt I... |
cyber-sec |
|
|
| Sun, 19 Jul 2026 18:07:06 GMT |
Build N’ Break: API Lab |
information-security |
|
|
| Wed, 24 Jun 2026 19:12:15 GMT |
The Invisible Threats: Why Logic Flaws Are Your Biggest Blind Spo... |
vulnerability-scanning |
|
|
| Mon, 13 Jul 2026 15:55:24 GMT |
Lab: Information disclosure in version control history (Informati... |
information-disclosure |
|
|
| Fri, 17 Jul 2026 09:18:44 GMT |
The Unseen Share: How I Downloaded Every File on 9 Tail Fox |
idor |
|
|
| Sun, 12 Jul 2026 14:23:31 GMT |
Hacking the Hacker’s Assistant: How I Found a Critical Stored X... |
xss-attack, bugbounty-writeup, xss-vulnerability |
|
|
| Sun, 21 Jun 2026 00:45:05 GMT |
Atdork |
google-dorking, google-dork |
|
|
| Thu, 11 Sep 2025 22:20:14 GMT |
It’s Coming: DorkFi Delivers PreFi Rewards Surge |
dorking |
|
|
| Sun, 19 Jul 2026 18:11:50 GMT |
DWAYNE JOHNSON REAL SOCIAL MEDIA ACCOUNTÂ . Â BRIEF SECURITY AWAR... |
cyber-security-awareness |
|
|
| Thu, 02 Jul 2026 03:47:13 GMT |
Cambodia Cyber Arena 2026: Web — My Assistant — Writeup |
rce |
|
|
| Mon, 13 Jul 2026 19:28:20 GMT |
Vulnerability Scanning vs. Autonomous Pentesting: Why Scanners Ar... |
vulnerability-scanning |
|
|
| Tue, 14 Jul 2026 12:52:09 GMT |
Server-Side Request Forgery: Exploiting and Fixing the SSRF Vulne... |
ssrf |
|
|
| Wed, 15 Jul 2026 18:22:14 GMT |
How I Built a Standalone AI Prompt Firewall: Architectural Insigh... |
cve |
|
|
| Sat, 18 Jul 2026 00:01:50 GMT |
Breaking Directories: A Bug Hunter’s Guide to Directory Travers... |
bug-bounty-tips, bug-bounty-writeup |
|
|
| Fri, 19 Jun 2026 17:40:08 GMT |
How to Get a Private Bug Bounty Invite on HackerOne — Without S... |
bugcrowd |
|
|
| Sat, 06 Jun 2026 07:18:44 GMT |
Update: The Ending of My $500 Loss and Web Cache Poisoning Story. |
web-cache-poisoning |
|
|
| Fri, 10 Jul 2026 13:08:56 GMT |
How I Found a Stored XSS Vulnerability While Testing for Self-XSS... |
security-research |
|
|
| Thu, 14 Aug 2025 10:54:38 GMT |
Unlocking the Hidden Power of Search Engines |
censys |
|
|
| Sun, 19 Jul 2026 14:51:01 GMT |
30 common mistakes that undermine network stability |
information-technology |
|
|
| Wed, 24 Jun 2026 19:59:01 GMT |
From an Informational Finding to a Valuable Lesson: My IDOR Disco... |
bugcrowd |
|
|
| Sat, 18 Jul 2026 13:56:11 GMT |
I First Learned About Neural Networks in 2016. Today They’re Tr... |
application-security |
|
|
| Fri, 03 Jul 2026 21:44:30 GMT |
Unauthenticated RCE in CKFinder via Null Byte Injection Vulnerabi... |
rce |
|
|
| Mon, 06 Jul 2026 07:31:35 GMT |
From Testing File Uploads to Discovering Remote Code Execution (R... |
remote-code-execution |
|
|
| Tue, 12 May 2026 17:55:36 GMT |
Wild Bounty Showdown PG Soft: Rahsia Maxwin Cowboy & Pola Gacor T... |
bounties |
|
|
| Sun, 19 Jul 2026 13:10:56 GMT |
The Kudankulam Nuclear Power Plant Data Extortion Incident by the... |
hacking |
|
|
| Fri, 17 Jul 2026 18:04:07 GMT |
I Found a CSRF-Style Bug in Proton and Earned a $200 Bounty. |
bug-bounty-writeup |
|
|
| Mon, 06 Jul 2026 17:10:06 GMT |
I Built a Great Ctrl + V Screenshot Upload Feature. Why Wasn’t ... |
file-upload |
|
|
| Sat, 11 Jul 2026 03:37:30 GMT |
Memburu Celah Keamanan di Situs Besar: Eksplorasi CVE-2021–4118... |
xss-vulnerability |
|
|
| Sat, 18 Jul 2026 19:04:06 GMT |
Cybersecurity with AI or AI Cybersecurity? Score Yourself Before ... |
information-security |
|
|
| Sat, 18 Jul 2026 11:40:23 GMT |
How a Scalable Code Executor Works and How I Built One |
remote-code-execution |
|
|
| Mon, 16 Mar 2026 14:32:42 GMT |
Web Security Series #5 — Exploiting Broken Access Control via T... |
bug-bounty-hunting |
|
|
| Sun, 19 Jul 2026 19:35:16 GMT |
《滴水之æ�©ï¼Œå®šå¿…æ¹§æ³‰ç›¸å ±ã€‹ | A drop of kindness, sh... |
vulnerability |
|
|
| Sun, 12 Jul 2026 19:41:39 GMT |
Account Takeover via Open Redirect XSS |
xss-attack |
|
|
| Wed, 17 Jun 2026 08:46:50 GMT |
Amazon Prime for Young Adults — Why Every College Soccer Fan Ne... |
bounties |
|
|
| Wed, 01 Jul 2026 10:16:28 GMT |
Auth Bypass is it? |
bug-bounty-hunter |
|
|
| Wed, 15 Jul 2026 06:04:21 GMT |
How I Turned a Database Import Feature into an Internal Network S... |
ssrf |
|
|
| Sun, 15 Mar 2026 17:49:52 GMT |
TryHackMe — Takeover Writeup |
subdomain-takeover |
|
|
| Sun, 19 Jul 2026 18:37:29 GMT |
Ice | TryHackMe |
penetration-testing |
|
|
| Thu, 02 Jul 2026 14:00:04 GMT |
Methodology over Automation: Deconstructing E-commerce Checkout L... |
hackerone |
|
|
| Tue, 30 Jun 2026 12:11:15 GMT |
El toro de Wall Street ya está en WhiteBIT |
bounty-program |
|
|
| Sun, 19 Jul 2026 05:31:01 GMT |
Authentication Vulnerability |
bug-bounty |
|
|
| Thu, 16 Jul 2026 09:05:51 GMT |
Why Application Vulnerability Testing Should Start Before Product... |
vapt |
|
|
| Sun, 05 Apr 2026 20:11:41 GMT |
I Tried Logging In… and Accidentally Did Responsible Disclosure... |
vdp |
|
|
| Thu, 16 Jul 2026 07:26:30 GMT |
Business logic vulnerabilities: Excessive Trust in Client-Side Co... |
vapt |
|
|
| Sun, 19 Jul 2026 22:05:45 GMT |
Task 2.1 -> Reconnaissance (Passive Recon) |
cybersecurity |
|
|
| Sun, 19 Jul 2026 10:14:48 GMT |
The Psychology of Feature Requests |
information-technology |
|
|
| Sat, 09 May 2026 01:31:00 GMT |
Your Server Is Showing Everything It Shouldn’t -The Apache Dire... |
directory-listing |
|
|
| Thu, 18 Jun 2026 11:52:47 GMT |
¿Usas Intercambio? |
bounty-program |
|
|
| Tue, 28 Apr 2026 07:09:41 GMT |
owockibot: The Bounty Board Powering the Agent Economy |
bounty-program |
|
|
| Mon, 04 May 2026 17:36:51 GMT |
The Complete Guide to Managed Cyber Defense: Protecting Your Busi... |
cyber-sec |
|
|
| Sat, 18 Jul 2026 15:12:35 GMT |
Authorization Bypass via Privilege Persistence After Role Downgra... |
web-security |
|
|
| Tue, 21 Apr 2026 15:05:26 GMT |
Web Security Series #17 — Exploiting Local File Inclusion (LFI)... |
file-inclusion |
|
|
| Mon, 22 Jun 2026 04:22:38 GMT |
Subdomain Takeover: A Complete Guide from Beginner to Advanced |
subdomain-takeover |
|
|
| Wed, 17 Jun 2026 16:57:29 GMT |
Unauthenticated IDOR on NASA’s GitLab Instance — From Recon t... |
bugcrowd |
|
|
| Tue, 19 May 2026 17:44:55 GMT |
Day 5: Footprinting & Reconnaissance -How Attackers Know Everythi... |
google-dorking |
|
|
| Sat, 18 Jul 2026 21:56:08 GMT |
Les héros sont banals, comme vous et moi |
vulnerability |
|
|
| Thu, 16 Jul 2026 15:34:38 GMT |
Workflow Bypass Leading to Unauthorized Access to Sensitive Recor... |
bug-bounty-tips, bug-bounty-hunter |
|
|
| Tue, 05 Aug 2025 00:19:11 GMT |
Breaking Recon with AMASS |
subdomain-enumeration |
|
|
| Fri, 31 May 2024 13:29:16 GMT |
Map of the worlds best URLs 2025 |
log-poisoning |
|
|
| Sun, 12 Jul 2026 09:08:06 GMT |
Android Pentesting in 2026: The Only Guide You’ll Need to Go Fr... |
bugs |
|
|
| Sun, 19 Jul 2026 06:19:51 GMT |
How I Earned a $300 Bug Bounty by Finding an Authorization Bypass... |
bugbounty-writeup |
|
|
| Fri, 17 Apr 2026 15:39:41 GMT |
Bug Bounty 2026: Why the “End of the World� is Actually a $50... |
bounties |
|
|
| Tue, 30 Jun 2026 05:13:55 GMT |
Post auth RCE in GeoSIG seismological equipment (GMSplus) |
pentest |
|
|
| Sat, 02 Aug 2025 14:15:23 GMT |
The Silent Risk in Your ICS: Why S7 Protocol Needs Security Atten... |
censys |
|
|
| Fri, 19 Jun 2026 20:02:36 GMT |
TryHackMe: Support Ops Platform Walkthrough |
lfi |
|
|
| Sat, 18 Apr 2026 05:07:38 GMT |
We’re About to Stop Trusting What We See Online — And AI Is t... |
cyber-sec |
|
|
| Sun, 19 Jul 2026 18:17:05 GMT |
Hunting Phishing Infrastructure on Netlify: Telegram Bot Exfiltra... |
cyber-security-awareness |
|
|
| Thu, 16 Jul 2026 14:20:32 GMT |
Ostium Exploit — $18M Drained |
exploit |
|
|
| Tue, 23 Jun 2026 15:09:51 GMT |
Cuando el atacante encuentra más de lo que deberÃa |
vulnerability-scanning |
|
|
| Wed, 22 Oct 2025 14:11:32 GMT |
Mastering Subdomain Enumeration: A Beginner’s Guide to Expandin... |
subdomain-enumeration |
|
|
| Tue, 05 Dec 2023 07:54:40 GMT |
LFI via SMTP log poisoning |
log-poisoning |
|
|
| Wed, 10 Jun 2026 19:48:50 GMT |
Visita inesperada. |
recon |
|
|
| Sun, 19 Jul 2026 15:21:14 GMT |
Tavily’den Api Key Alma Rehberi (2026) |
api-key |
|
|
| Mon, 13 Jul 2026 21:52:49 GMT |
I Found Critical Vulnerabilities in a Shark Tank Brand’s Websit... |
bugs |
|
|
| Wed, 11 Feb 2026 21:37:40 GMT |
From Course Notes to CVE: How a GXPN Study Session Uncovered a 40... |
vulnerability-disclosure |
|
|
| Sun, 12 Jul 2026 13:23:09 GMT |
Common Authentication Attacks and How I Improved Security in My V... |
xss-attack |
|
|
| Mon, 06 Apr 2026 21:45:53 GMT |
Cookie(Çerez) Türleri ve Pentest Açısından Önemi |
web-pentest |
|
|
| Mon, 29 Jun 2026 03:20:06 GMT |
CVE-2026–50521 | Microsoft Edge (Chromium-based) Remote Code E... |
remote-code-execution |
|
|
| Sat, 11 Jul 2026 03:01:04 GMT |
Achieving Zero-Downtime AI for Security Research: Guide to Settin... |
security-research |
|
|
| Mon, 06 Jul 2026 11:47:49 GMT |
UK Business Directory: Strategic Visibility for Local Market Succ... |
directory-listing |
|
|
| Sun, 19 Jul 2026 12:53:49 GMT |
《患得患失的海嘯：在妳的生活ä¸ï¼Œæˆ‘是å�¦å�¯æœ‰å�... |
vulnerability |
|
|
| Sat, 11 Jul 2026 13:01:01 GMT |
Here’s your Medium article on CVE-2026–10112 |
xss-vulnerability |
|
|
| Thu, 16 Jul 2026 01:54:10 GMT |
RoguePlanet (CVE-2026–50656): I Didn’t Touch System32 — Def... |
exploit |
|
|
| Wed, 19 Nov 2025 19:44:02 GMT |
The Pulse of Liquidity: How DorkFi’s Interest Rates Adapt in Re... |
dorks |
|
|
| Wed, 27 May 2026 19:50:08 GMT |
Why Your Directory Listing Service Isn’t Working — And the Fr... |
directory-listing |
|
|
| Fri, 12 Jun 2026 12:39:46 GMT |
[Nvidia AI API] Nvidia �費AI API 申請 |
api-key |
|
|
| Sun, 19 Jul 2026 20:28:15 GMT |
The regex that froze a shipped app for two minutes |
security |
|
|
| Wed, 01 Jul 2026 15:52:58 GMT |
Critical File Upload Vulnerability: Web Shell Upload via Content-... |
rce |
|
|
| Sun, 19 Jul 2026 22:41:18 GMT |
We Paid SharkNinja to Put Spy Cameras in 1.5 Million Living Rooms |
security |
|
|
| Sat, 18 Jul 2026 15:38:49 GMT |
Don’t Trust the Token — The Art of JWT Attacks |
bug-bounty-tips |
|
|
| Wed, 15 Jul 2026 01:51:32 GMT |
I Asked the Frontend for Secrets, and It Said Yes |
bug-bounty-hunter |
|
|
| Sun, 05 Jul 2026 05:37:58 GMT |
The Recon Habit Most Hunters Skip (And Pay For Later) |
bug-bounty-hunter |
|
|
| Wed, 03 Jun 2026 14:55:44 GMT |
Recruit | TryHackMe | Walkthrough |
local-file-inclusion |
|
|
| Sun, 07 Jun 2026 16:46:16 GMT |
METASPOITABLE 2 |
vulnerability-scanning |
|
|
| Wed, 01 Jul 2026 16:21:55 GMT |
When Productivity Becomes a Threat: Malicious Claude Skills |
security-research |
|
|
| Thu, 16 Jul 2026 03:53:11 GMT |
How a ~3 KB TIFF Can Make libtiff Ask for 16 GB of Memory |
cve |
|
|
| Sun, 19 Jul 2026 15:00:04 GMT |
Unrestricted File Upload via Exposed Upload Preset |
bug-bounty |
|
|
| Sat, 18 Jul 2026 19:16:51 GMT |
How to Get Into Cybersecurity ? |
information-security |
|
|
| Sun, 19 Jul 2026 13:04:24 GMT |
HOW SMALL MISCONFIGURATIONS CHAINED TO ROOT ON EMPIRE: LUPINONE |
penetration-testing, ethical-hacking |
|
|
| Wed, 01 Jul 2026 11:46:00 GMT |
Convierte acciones sencillas en recompensas reales |
bounty-program |
|
|
| Mon, 30 Mar 2026 06:03:13 GMT |
Why Business Directory Listings Are the Secret Weapon of Off-Page... |
directory-listing |
|
|
| Sat, 11 Jul 2026 19:12:59 GMT |
Breaking CSPs |
xss-attack |
|
|
| Sat, 27 Jun 2026 03:05:54 GMT |
PortSwigger : Reflected XSS into a JavaScript String with Angle B... |
cross-site-scripting |
|
|
| Mon, 22 Jun 2026 01:16:21 GMT |
PortSwigger : DOM XSS in jQuery Anchor href Attribute Sink Using ... |
cross-site-scripting |
|
|
| Fri, 17 Jul 2026 13:27:03 GMT |
I Built a Bug Bounty Recon Tool That Automates the Boring Parts (... |
bug-bounty-writeup |
|
|
| Sun, 12 Jul 2026 19:11:01 GMT |
Building a File Upload Scanning Pipeline for Laravel and S3 |
vulnerability-scanning |
|
|
| Sat, 20 Dec 2025 18:21:40 GMT |
N0aziXss SubSpectre: Advanced Subdomain Discovery with Intelligen... |
subdomain-enumeration |
|
|
| Sun, 31 May 2026 06:49:51 GMT |
Subdomain Takeover: The Silent Killer of Web Security — Tryhack... |
subdomain-takeover |
|
|
| Sun, 19 Jul 2026 09:48:43 GMT |
What an AI Penetration Test Actually Covers |
penetration-testing, infosec |
|
|
| Sun, 19 Jul 2026 09:56:58 GMT |
Windows PowerShell: Advanced Object Filtering and Enterprise Auto... |
infosec |
|
|
| Tue, 23 Jun 2026 14:32:52 GMT |
Authentication Bypass & Information Disclosure in a Fortune 500 C... |
vdp |
|
|
| Thu, 21 May 2026 15:16:28 GMT |
How to Bypass LinkedIn Commercial Use Limit in 2026 (Without Payi... |
google-dorking |
|
|
| Tue, 16 Jun 2026 11:22:14 GMT |
Review AtDork: Tool Dorking Python Terbaik 2026? |
dorking |
|
|
| Thu, 09 Jul 2026 17:27:50 GMT |
When CPUs Betray Us: Understanding Spectre |
exploit |
|
|
| Sun, 24 May 2026 15:03:53 GMT |
Support | TryHackMe | Walkthrough |
local-file-inclusion |
|
|
| Sun, 19 Jul 2026 15:16:43 GMT |
Data Encryption in Action: A Practical Azure Configuration Demo f... |
security, information-security |
|
|
| Fri, 17 Jul 2026 07:04:02 GMT |
Lab 2 : Information Disclosure on a Debug Page |
information-disclosure |
|
|
| Sat, 20 Jun 2026 07:44:22 GMT |
Ağınız Dışarıdan Nasıl Görünüyor? Shodan İle Kurumsal ... |
shodan |
|
|
| Thu, 11 Jun 2026 04:45:57 GMT |
Discover printers during an internal penetration testing engageme... |
recon |
|
|
| Sat, 18 Jul 2026 18:43:37 GMT |
From Reflected XSS to Critical Bug Led to Sensitive Data Leakage |
xss-vulnerability |
|
|
| Wed, 20 May 2026 11:18:33 GMT |
Me Before Digiss vs Me Now in Digiss: How My Cybersecurity Learni... |
cyber-sec |
|
|
| Fri, 12 Jun 2026 12:24:10 GMT |
Watcher (THM) Tryhackme Medium Challenge |
local-file-inclusion |
|
|
| Sun, 05 Jul 2026 18:57:05 GMT |
TryHackMe Protocols and Servers (versão em português) |
pentest |
|
|
| Thu, 02 Jul 2026 15:26:09 GMT |
Billing — TryHackMe |
rce |
|
|
| Tue, 09 Jun 2026 06:35:46 GMT |
From LFI to Database Takeover and the RCE That Almost Was |
lfi |
|
|
| Sat, 04 Jul 2026 14:22:08 GMT |
XML External Entity (XXE) Injection — Arbitrary Local File Disc... |
security-research |
|
|
| Tue, 03 Feb 2026 17:12:47 GMT |
My First Week: 3 Business Logic Bugs in Major E-Commerce |
bug-bounty-program |
|
|
| Sat, 18 Jul 2026 11:57:54 GMT |
Is Your Authentication Secure? Auditing HS256 JWTs the Right Way |
application-security |
|
|
| Sun, 19 Jul 2026 10:16:53 GMT |
WP Security Report Chrome Extension (Free on Chrome Store) |
pentesting |
|
|
| Sun, 26 Jan 2025 19:08:11 GMT |
Matrix strike’s back against honesty from a power stance |
web-pentest |
|
|
| Fri, 05 Jun 2026 04:49:28 GMT |
Price Manipulation in Payment Gateway / Shopping Cart |
vdp |
|
|
| Thu, 13 Mar 2025 18:09:56 GMT |
How I Found Sensitive Information using Github Dorks in Bug Bount... |
github-dorking |
|
|
| Wed, 15 Jul 2026 13:44:51 GMT |
Trust the Caller, Trust the Output: Six CVEs in the AI Tooling Bo... |
cve |
|
|
| Sun, 19 Jul 2026 09:54:42 GMT |
Zero: Seeing What’s Hidden |
infosec |
|
|
| Thu, 16 Jul 2026 15:11:23 GMT |
A Newsletter Confirmation Link That Doubled as a Permanent, Non-E... |
bug-bounty-tips |
|
|
| Fri, 10 Jul 2026 16:39:15 GMT |
Using Game Cheat PoC Code to Exploit Userland Processes. (Part 1)... |
exploit |
|
|
| Fri, 22 May 2026 21:10:59 GMT |
Recruit TryHackMe walkthrough |
lfi |
|
|
| Thu, 16 Jul 2026 05:12:23 GMT |
When -1 Becomes a Heap Write: A libtiff TIFFReadAndRealloc() Vuln... |
cve |
|
|
| Sun, 19 Jul 2026 14:38:07 GMT |
ä¼�æ¥è³‡è¨Šå®‰å…¨éƒ¨é–€æ˜¯æœ€é�©å�ˆçš„ AI 管ç�†å–®ä½� |
information-security |
|
|
| Fri, 17 Jul 2026 07:05:37 GMT |
Lab 3 : Source code disclosure via backup files |
information-disclosure |
|
|
| Thu, 11 Jun 2026 05:26:16 GMT |
START HERE, MANIFESTO |
dorks |
|
|
| Wed, 01 Jul 2026 14:16:27 GMT |
Four IDORs, One Target: Broken Access Control in a Gaming Platfor... |
pentest |
|
|
| Fri, 24 Apr 2026 10:26:01 GMT |
¿Estás emocionado por el próximo partido entre FC Barcelona y ... |
bounty-program |
|
|
| Sun, 19 Jul 2026 16:29:26 GMT |
How Much Can a Stranger Learn About You From Public Information A... |
hacking, infosec |
|
|
| Mon, 13 Jul 2026 08:03:56 GMT |
I Spent 5 Days Looking for a Bug That Didn’t Exist: NASA |
bugbounty-writeup |
|
|
| Fri, 24 Jan 2025 00:08:47 GMT |
A majestic temple opportunity of wellbeing and wellness |
web-pentest |
|
|
| Sun, 19 Jul 2026 14:31:01 GMT |
TryHackme Ignite |
cyber-security-awareness |
|
|
| Tue, 14 Jul 2026 10:10:25 GMT |
Vulnerability Assessment and Penetration Testing Services in Indi... |
vapt |
|
|
| Sun, 19 Jul 2026 06:05:26 GMT |
CISA Urges SharePoint Hardening After New Exploitations |
vulnerability |
|
|
| Wed, 15 Jul 2026 21:37:37 GMT |
5 Bugs My Paying Customers Found Before I Did |
bugs |
|
|
| Sun, 19 Jul 2026 13:01:02 GMT |
CVE-2026–10121: Second Unpatchable Stack Overflow Discovered in... |
ethical-hacking |
|
|
| Tue, 14 Jul 2026 06:36:00 GMT |
Why Your AI Coding Agent Keeps Repeating the Same Bug |
bugs |
|
|
| Fri, 10 Jul 2026 09:19:11 GMT |
How I Bypassed a Mandatory 2FA Enforcement Just by Dropping One R... |
bugbounty-writeup |
|
|
| Fri, 17 Jul 2026 04:07:15 GMT |
IDOR simple way with no burpsuite banged P3 |
bugs, idor |
|
|
| Fri, 17 Jul 2026 06:53:37 GMT |
Information Disclosure in Version Control History |
information-disclosure |
|
|
| Sat, 09 May 2026 10:01:40 GMT |
Shodan.io | TryHackMe |
shodan |
|
|
| Mon, 27 Apr 2026 07:12:30 GMT |
One Weird Query String That Let Anyone Hijack Any Account in Roc... |
bounties |
|
|
| Sun, 19 Jul 2026 17:10:28 GMT |
The 2026 World Cup, Polymarket, New Crypto Users, and New Threats |
security |
|
|
| Sun, 19 Jul 2026 14:45:22 GMT |
I Built My First Active Directory Lab From Scratch — Here’s E... |
infosec |
|
|
| Sat, 27 Jun 2026 17:01:35 GMT |
When Missing Rate Limiting Leads to a Critical Authentication Fin... |
bug-bounty-hunter |
|
|
| Sun, 19 Jul 2026 11:25:43 GMT |
Best Ethical Hacking Training in Noida | Ducat India |
ethical-hacking |
|
|
| Sat, 20 Apr 2024 17:20:58 GMT |
TryHackMe — Brute Walkthrough | TheHiker |
log-poisoning |
|
|
| Fri, 01 May 2026 20:23:15 GMT |
Shodan Facet Searches That Read Like Threat Intel Poetry |
shodan |
|
|
| Tue, 23 Jun 2026 16:59:56 GMT |
The Internet Never Forgets : A Beginner’s Guide to OSINT |
recon |
|
|
| Thu, 28 May 2026 07:15:06 GMT |
¡Únete y hazte con uno de los más de 400 premios! |
bounty-program |
|
|
| Sun, 19 Jul 2026 06:38:13 GMT |
When “Patched� Doesn’t Mean “Safe�: Inside the July 202... |
vulnerability, cyber-security-awareness |
|
|
| Sat, 18 Jul 2026 16:27:08 GMT |
When The Soul Stays In Its Cocoon: The Hard Path To Becoming A Bu... |
vulnerability |
|
|
| Sat, 27 Jun 2026 17:05:53 GMT |
Stored XSS via SVG File Upload in a Project Management Applicatio... |
file-upload |
|
|
| Sun, 19 Jul 2026 16:22:19 GMT |
VulnNet Roasted — TryHackMe Active Directory Write-up |
hacking |
|
|
| Thu, 16 Jul 2026 13:05:15 GMT |
A Hacker Built Self-Updating Bug Bounty Skills From 2,000 Reports |
hackerone |
|
|
| Fri, 06 Jun 2025 15:47:21 GMT |
��♂� GitHub Dorking for Bug Bounty: Hackers' Hidden Playg... |
github-dorking |
|
|
| Sun, 19 Jul 2026 03:18:25 GMT |
Every Breached Company Had the Certificate |
information-security |
|
|
| Wed, 08 Jul 2026 21:58:01 GMT |
The $0 IDOR That Was Worth More Than a $12,500 P1 |
hackerone |
|
|
| Sun, 19 Jul 2026 21:08:49 GMT |
Sexuelle Erpressung (Sextortion) auf Tinder und WhatsApp: VollstÃ... |
cybersecurity |
|
|
| Fri, 26 Jun 2026 06:46:44 GMT |
How Google Dorking Can Streamline Your SEO Research Process |
google-dorking |
|
|
| Sat, 11 Jul 2026 08:08:11 GMT |
I Was Broke, Bored, and Curious About Hacking — Then I Found Ou... |
hackerone |
|
|
| Sun, 12 Jul 2026 04:43:16 GMT |
A Critical Vulnerability in PraisonAI: What You Need to Know |
remote-code-execution |
|
|
| Fri, 03 Jul 2026 14:09:25 GMT |
TryHackMe Reconhecimento ativo (versão em português) |
pentest |
|
|
| Sun, 19 Jul 2026 18:08:54 GMT |
Faytech’s ISO 14001: Environmental Responsibility Explained |
information-technology |
|
|
| Mon, 13 Jul 2026 06:46:58 GMT |
How I Discovered a Premium Bypass Vulnerability in Spotify — An... |
hackerone |
|
|
| Wed, 20 May 2026 20:47:25 GMT |
FINDING INFORMATION QUICKLY AND ACCURATELY WITH GOOGLE DORK |
google-dorking, google-dork, github-dorking |
|
|
| Wed, 06 May 2026 11:36:01 GMT |
Google Dorking |
google-dorking, dorking |
|
|
| Tue, 13 Jan 2026 13:27:13 GMT |
Hacking “Time�: When Critical Infrastructure Forgets to Set a... |
vulnerability-disclosure |
|
|
| Sun, 17 May 2026 15:50:44 GMT |
Web Cache Poisoning |
web-cache-poisoning |
|
|
| Wed, 17 Dec 2025 09:57:30 GMT |
The Mother Lode: Hacking with GitHub Dorking |
github-dorking |
|
|
| Wed, 13 May 2026 07:37:16 GMT |
How to Find Subdomains Using Shodan and the Favicon Hash Trick |
subdomain-enumeration, shodan |
|
|
| Sun, 19 Jul 2026 09:47:19 GMT |
Stop Paying for AI: The 2026 Guide to Master-Class Productivity (... |
information-technology |
|
|
| Sun, 19 Jul 2026 11:20:48 GMT |
Building Practical Cyber security for a Growing Business |
information-security, cyber-security-awareness |
|
|
| Sun, 22 Oct 2023 19:57:30 GMT |
Performing a Log Poisoning Attack |
log-poisoning |
|
|
| Thu, 28 Sep 2023 23:05:39 GMT |
Archangel — TryHackMe |
log-poisoning |
|
|
| Sat, 18 Jul 2026 06:52:39 GMT |
[Support] — Exploiting LFI, Weak Session Cookies, and Command... |
local-file-inclusion |
|
|
| Thu, 16 Jul 2026 18:52:16 GMT |
From a URL Parameter to Full System Access: Logslinger CTF |
lfi |
|
|
| Thu, 27 Mar 2025 23:46:11 GMT |
Make Break and Betrayal |
web-pentest |
|
|
| Mon, 13 Jul 2026 15:01:02 GMT |
How to Build High-Performance DevOps (via Accelerate) |
bugs |
|
|
| Wed, 08 Jul 2026 19:28:06 GMT |
CRLF Injection — Understanding the Vulnerability ( P 1/3 ) : |
bugbounty-writeup |
|
|
| Tue, 23 Jun 2026 07:06:16 GMT |
Bug Bounty Recon Mastery →Advanced Reconnaissance and Attack Su... |
subdomain-enumeration |
|
|
| Mon, 25 May 2026 14:19:37 GMT |
Look at this, we created this |
bounties |
|
|
| Thu, 18 Jun 2026 15:00:04 GMT |
Bore-dom, IP Pools, and a Nation’s Water Control: How I Breache... |
cyber-sec |
|
|
| Sun, 19 Jul 2026 22:27:56 GMT |
We Built an Open-Source AI Security Analyzer in 5 Days with AI Co... |
security |
|
|
| Sun, 19 Jul 2026 21:01:10 GMT |
The Secret Was Just One Folder Away |
web-security, information-disclosure, file-inclusion |
|
|
| Tue, 14 Jul 2026 17:10:47 GMT |
File Inclusion Challenge (TryHackMe) |
file-inclusion |
|
|
| Tue, 14 Jul 2026 21:31:00 GMT |
OWASP Top 10 Labs Series #10 - SSRF: Two Labs, Two Ways a Server ... |
ssrf |
|
|
| Sun, 19 Jul 2026 19:21:50 GMT |
Registration Security Testing Checklist |
bug-bounty |
|
|
| Tue, 18 Nov 2025 18:12:40 GMT |
Dork Labs Awarded AWS Activate Startup Grant |
dorks |
|
|
| Sun, 23 Feb 2025 11:17:25 GMT |
$1000-$10k worth Leaks via Github Secret Dorks |
github-dorking |
|
|
| Mon, 04 May 2026 23:53:49 GMT |
Break The Syntax CTF — Web Challenge 2 Writeup |
lfi |
|
|
| Sun, 19 Jul 2026 14:47:12 GMT |
The Bandit Surfer (THM) Tryhackme Hard Challenge |
hacking |
|
|
| Sat, 18 Jul 2026 18:08:07 GMT |
Getting Started with bWAPP on Linux: Installation, Database Confi... |
web-security |
|
|
| Thu, 09 Jul 2026 12:57:30 GMT |
Essential Cybersecurity Tools Every Small Business Needs In 2026 |
cybersecurity-tools |
|
|
| Fri, 17 Jul 2026 13:36:01 GMT |
The Night Claude Found a Critical IDOR and Deleted the Test Accou... |
idor |
|
|
| Mon, 13 Jul 2026 20:58:53 GMT |
IDOR & Bypass Techniques: A Practical Methodology for Security Te... |
idor |
|
|
| Tue, 09 Jun 2026 07:00:48 GMT |
Costa Rica Beaches: Which Ones Are Worth the Drive |
directory-listing |
|
|
| Wed, 06 May 2026 11:30:53 GMT |
How Local Business Directory Listing Helps Attract Local Customer... |
directory-listing |
|
|
| Fri, 01 Aug 2025 06:17:06 GMT |
15,000 Critical Systems Are Exposed — Thanks to This Outdat... |
censys |
|
|
| Sun, 19 Jul 2026 07:02:28 GMT |
Cyber Security: The Invisible Shield of Our Digital World |
cyber-security-awareness |
|
|
| Thu, 09 Apr 2026 17:39:27 GMT |
From 401 to BAC: How a Refresh Broke Workspace Authorization |
vulnerability-disclosure |
|
|
| Sat, 18 Jul 2026 15:13:45 GMT |
PentesterLab — Recon 10: Visual Reconnaissance |
recon |
|
|
| Thu, 02 Apr 2026 17:35:36 GMT |
How I Found a Subdomain Takeover via BetterUptime |
subdomain-takeover |
|
|
| Sun, 15 Mar 2026 16:45:35 GMT |
Web Security Series #4 — Discovering Unauthorized Resources via... |
bug-bounty-hunting |
|
|
| Sat, 18 Jul 2026 11:22:27 GMT |
HTTP Request Smuggling: Turning Two Servers Against Each Other on... |
web-security |
|
|
| Sun, 17 May 2026 02:56:19 GMT |
The 3 Bug Hunting Habits That Made Me Go From $0 to $5k (And None... |
bug-bounty-program |
|
|
| Thu, 04 Jun 2026 11:54:28 GMT |
Vulnerability Management: Identifying and Fixing Security Weaknes... |
vulnerability-scanning |
|
|
| Fri, 26 Jun 2026 17:09:50 GMT |
How to Upload Files in Chunks with FilePond and Laravel | Mindwa... |
file-upload |
|
|
| Thu, 09 Jul 2026 05:17:08 GMT |
Identifying Publicly Leaked OpenAI and Anthropic API Keys |
api-key |
|
|
| Thu, 02 Jul 2026 16:02:56 GMT |
Strengthening Web3 Trust with Blockchain Incident Response & Fore... |
bug-bounty-program |
|
|
| Mon, 13 Jul 2026 17:17:30 GMT |
Understanding Server-Side Request Forgery (SSRF): A Complete Guid... |
ssrf |
|
|
| Sun, 19 Jul 2026 12:14:55 GMT |
XSS— TryHackMe |
xss-vulnerability |
|
|
| Tue, 16 Jun 2026 02:05:28 GMT |
How to Find More Subdomains Than Everyone Else |
recon |
|
|
| Wed, 01 Jul 2026 11:02:50 GMT |
Bounty Hacker |
bounties |
|
|
| Fri, 12 Dec 2025 06:49:56 GMT |
How Variable Data Technology is Transforming Postcard & Brochure ... |
vdp |
|
|
| Tue, 07 Jul 2026 04:44:54 GMT |
How to Get USCSI® Certified: A Complete Step-by-Step Guide |
cybersecurity-tools |
|
|
| Sun, 14 Jun 2026 22:00:33 GMT |
La sémantique de l’esquive : Analyse lexicologique du discours... |
lfi |
|
|
| Sat, 20 Jun 2026 14:51:32 GMT |
Building DropWire: local file transfer from a browser, no account... |
file-upload |
|
|
| Sun, 13 Jul 2025 16:32:21 GMT |
ProConOS Exposed: What ICS Security Teams Need to Know |
censys |
|
|
| Tue, 14 Apr 2026 17:24:57 GMT |
PAM Cleanup in Practice: Discovery, Risk Triage and Lifecycle Gov... |
cyber-sec |
|
|
| Fri, 17 Apr 2026 19:01:54 GMT |
The Ultimate Guide to Wayback Machine Dorking for Deleted Leaks |
dorking |
|
|
| Mon, 25 May 2026 09:26:41 GMT |
Web Önbelleği Zehirlenmesi |
web-cache-poisoning |
|
|
| Thu, 16 Jul 2026 10:15:10 GMT |
Breaking Down LegacyHive |
exploit |
|
|
| Sat, 18 Jul 2026 15:31:43 GMT |
Zero Requiem: The $5,000 Blind SSRF Chain That Owned Lelouch Lam... |
rce |
|
|
| Tue, 24 Mar 2026 17:48:00 GMT |
The Ultimate Bug Bounty Course: From Zero to Advanced Hacker 1 |
bug-bounty-hunting |
|
|
| Thu, 11 Jun 2026 17:29:29 GMT |
Free AI API Keys: How to Get Them Without a Credit Card |
api-key |
|
|
| Sat, 18 Jul 2026 16:50:21 GMT |
wp2shell: Breaking Down the Critical WordPress RCE (CVE-2026–60... |
bugbounty-writeup |
|
|
| Fri, 17 Apr 2026 04:53:23 GMT |
How I Found an Exposed Google Maps API Key on a Global Brand’s ... |
vdp |
|
|
| Wed, 08 Jul 2026 13:01:02 GMT |
CVE-2026–10107: SSRF in MoviePilot v2 Image Proxy Endpoint |
ssrf |
|
|
| Fri, 12 Jun 2026 11:04:39 GMT |
Why Your Subdomain Takeover Reports Keep Getting Closed as N/A (A... |
subdomain-takeover |
|
|
| Sat, 11 Jul 2026 23:03:09 GMT |
Finding Reflected XSS Through Persistence |
xss-attack |
|
|
| Thu, 09 Jul 2026 14:29:41 GMT |
One Wildcard Character — $88,337 from Google: How brutecat Brok... |
bugbounty-writeup |
|
|
| Thu, 12 Mar 2026 18:11:47 GMT |
A Simple P4 Bug That Ended as Duplicate |
bug-bounty-hunting |
|
|
| Mon, 04 May 2026 12:56:26 GMT |
Beyond alert(1): Advanced XSS Payload Crafting, Filter Bypasses &... |
xss-bypass |
|
|
| Fri, 03 Jul 2026 07:26:00 GMT |
The June 2026 Vulnerability Surge: Why Your Perimeter Defenses Ar... |
remote-code-execution |
|
|
| Mon, 18 May 2026 13:05:18 GMT |
Subdomain Takeover |
subdomain-takeover |
|
|
| Sun, 19 Jul 2026 13:37:40 GMT |
I Found an HTML Injection Vulnerability | A Responsible Bug Bou... |
hacking |
|
|
| Sun, 21 Jun 2026 18:54:02 GMT |
From Hydra to RCE: Breaking Down TryHackMe’s Support Machine |
web-pentest |
|
|
| Tue, 07 Jul 2026 06:11:00 GMT |
Unmasking CVE-2026–26128: The New Windows SMB & NTLM Reflection... |
exploit |
|
|
| Tue, 18 Nov 2025 08:33:41 GMT |
A Chain of Vulnerabilities Leading to Critical Information Disclo... |
bug-bounty-program |
|
|
| Sun, 05 Jul 2026 12:32:24 GMT |
How to Pick a Directory Listing Service That Actually Works |
directory-listing |
|
|
| Sun, 19 Jul 2026 17:12:04 GMT |
The Most Important Cybersecurity Tool Isn’t AI. It’s Logs. |
information-technology, cyber-security-awareness |
|
|
| Mon, 06 Jul 2026 20:43:42 GMT |
Active Directory Certificate Services Exploitation 9–16 |
pentest |
|
|
| Fri, 03 Jul 2026 21:44:21 GMT |
CVE-2026–48493: Privilege Escalation via Permission Bypass in S... |
security-research |
|
|
| Sat, 02 May 2026 14:24:34 GMT |
Analytic Tools |
cyber-sec |
|
|
| Sun, 19 Jul 2026 22:05:32 GMT |
From the Pitch to the Pipeline: 3 Strategic Lessons from World Cu... |
cybersecurity |
|
|
| Sun, 19 Jul 2026 21:20:07 GMT |
Stop Wasting Time Writing Wazuh Decoders: A Guide to Automating P... |
cybersecurity |
|
|
| Fri, 17 Jul 2026 15:38:32 GMT |
What My Own Codex Usage Data Says About the Company I’m Buildin... |
application-security |
|
|
| Tue, 07 Jul 2026 05:08:35 GMT |
SSRF |
exploit |
|
|
| Mon, 06 Jul 2026 20:12:41 GMT |
When Changing an Email Isn’t Enough: Discovering a Persistent A... |
hackerone |
|
|
| Sun, 19 Jul 2026 18:29:52 GMT |
OSINT CTF Walkthroughs |
ethical-hacking |
|
|
| Tue, 21 Apr 2026 13:33:52 GMT |
Kioptrix: 2014 — VulnHub Walkthrough pChart LFI + PhpTax RCE to... |
lfi |
|
|
| Thu, 02 Jul 2026 12:21:10 GMT |
OffSec PG: Amaterasu Walkthrough |
pentest |
|
|
| Sat, 04 Jul 2026 14:47:14 GMT |
AI is built into apps now. What does that mean for data security? |
cyber-sec |
|
|
| Sat, 18 Jul 2026 18:29:15 GMT |
10 Ways to Encode an XSS Payload |
xss-attack |
|
|
| Sun, 19 Jul 2026 17:28:32 GMT |
The disk Group: The Quietest Root Shell You'll Ever Hand Out |
ethical-hacking |
|
|
| Thu, 16 Jul 2026 05:04:57 GMT |
Recreating the Capital One Breach in My Own Azure Lab |
vapt |
|
|
| Sat, 18 Jul 2026 19:00:12 GMT |
XSS Bypass — The Hackers Labs |
xss-attack, xss-bypass |
|
|
| Mon, 29 Jun 2026 01:03:39 GMT |
Belajar tentang File Inclusion dalam Penetration Testing |
local-file-inclusion, file-inclusion |
|
|
| Fri, 17 Jul 2026 15:06:17 GMT |
Mastering AWS IAM: The Foundation of Cloud Security Every AppSec ... |
application-security |
|
|
| Sun, 12 Jul 2026 02:44:51 GMT |
DOM XSS in document.write sink using source location.search insid... |
xss-attack |
|
|
| Thu, 02 Oct 2025 06:59:46 GMT |
Endless Cashback Glitch:How I Unlocked Unlimited Free Orders with... |
bug-bounty-program |
|
|
| Wed, 17 Jun 2026 07:53:43 GMT |
Operation Liwanag: The Same Map a Chinese Intelligence Asset Drew... |
shodan, censys |
|
|
| Tue, 21 Apr 2026 14:42:50 GMT |
Web Security Series # 16— Exploiting Local File Inclusion (LFI) |
file-inclusion |
|
|
| Fri, 10 Jul 2026 18:20:51 GMT |
Hello World! First post, first CVE |
security-research |
|
|
| Mon, 04 May 2026 07:35:39 GMT |
CPDoS via Content Negotiation Mechanism |
web-cache-poisoning |
|
|
| Thu, 20 Nov 2025 17:16:47 GMT |
The Health Factor: How DorkFi Keeps Your Position Safe |
dorks |
|
|
| Wed, 13 May 2026 16:01:01 GMT |
Mapleton (LFI to RCE) WebVerse |
lfi |
|
|
| Mon, 11 May 2026 04:25:50 GMT |
Google Dorking for Beginners: Ghosting the Network |
google-dorking |
|
|
| Mon, 13 Jul 2026 21:52:24 GMT |
How I Exposed a Critical SIEM Vulnerability — And Why Your Infr... |
exploit |
|
|
| Thu, 16 Jul 2026 07:24:50 GMT |
Information Disclosure vulnerabilities: Source Code Disclosure vi... |
vapt |
|
|
| Wed, 24 Jun 2026 13:40:07 GMT |
SOC Tools Explained for Beginners: SIEM, EDR, NDR & SOAR — A Si... |
cybersecurity-tools |
|
|
| Mon, 08 Jun 2026 08:50:12 GMT |
Huggingface’den Api Key Alma İçeriği (2026) |
api-key |
|
|
| Fri, 17 Jul 2026 07:57:49 GMT |
Konsep Dasar Bug, Error, Defect, dan Failure dalam Software Quali... |
bugs |
|
|
| Fri, 17 Jul 2026 09:29:07 GMT |
Heard of the BONK DAO Exploit? | A Funny, Straightforward One |
exploit |
|
|
| Thu, 16 Jul 2026 16:38:37 GMT |
Stored XSS via SVG File Upload Leading to Account Takeover in an ... |
bug-bounty-tips |
|
|
| Sat, 04 Jul 2026 16:38:19 GMT |
Fools Mate — TryHackMe Writeup |
security-research |
|
|
| Fri, 19 Sep 2025 07:40:16 GMT |
How I Tracked Our Clients’ Device Versions Without Direct Repor... |
zoomeye |
|
|
| Wed, 25 Feb 2026 01:47:45 GMT |
How I Found a Path Traversal in the Rancher Dashboard via HAR Rep... |
web-pentest |
|
|
| Mon, 08 Jun 2026 10:33:04 GMT |
How a Routine XSS Hunt Led to an Unexpected Database Information ... |
vulnerability-disclosure |
|
|
| Fri, 26 Jun 2026 06:25:44 GMT |
Costa Rica Canopy Tours: Choosing Experiences That Match Your Com... |
directory-listing |
|
|
| Thu, 16 Jul 2026 03:28:39 GMT |
Nexus — HackTheBox Writeup |
cve |
|
|
| Wed, 17 Jun 2026 18:22:29 GMT |
Why 90% of Bug Bounty Hunters Fail in Their First 3 Months (And H... |
recon |
|
|
| Sat, 18 Jul 2026 19:31:43 GMT |
I Broke Down wp2shell — the RCE Bug Putting 500M WordPress Site... |
vulnerability, web-security |
|
|
| Thu, 04 Dec 2025 04:45:36 GMT |
What is Google Dorking? |
dorking |
|
|
| Fri, 24 Jan 2025 09:34:52 GMT |
A new Holistic temple opening InLeeds |
web-pentest |
|
|
| Wed, 18 Feb 2026 21:56:48 GMT |
Chapter 14: Subdomain Takeover |
subdomain-takeover |
|
|
| Sun, 19 Jul 2026 21:30:38 GMT |
AD authenticated Enumeration Masterclass: From Native CLI to Grap... |
cybersecurity |
|
|
| Mon, 15 Jun 2026 03:18:06 GMT |
How I Escalated Privileges in a File-Sharing Platform by Changing... |
bugcrowd |
|
|
| Thu, 02 Jul 2026 12:34:12 GMT |
TryHackMe: NoScope — Finding RCE |
remote-code-execution |
|
|
| Mon, 18 May 2026 07:01:05 GMT |
InterLink Migration Vote Begins | Active Bounty Season 3 |
bounty-program |
|
|
| Sat, 18 Jul 2026 02:39:13 GMT |
Bypassing Rate Limiting on a Password Reset Endpoint With a Singl... |
bug-bounty-tips, bug-bounty-writeup |
|
|
| Fri, 03 Jul 2026 19:50:32 GMT |
: … |
remote-code-execution |
|
|
| Sat, 20 Jun 2026 11:04:15 GMT |
Scanning: The Second Stage of Penetration Testing — Turning Inf... |
vulnerability-scanning |
|
|
| Thu, 02 Apr 2026 18:59:50 GMT |
File Inclusion (LFI/RFI) — Extracting Sensitive Data from confi... |
file-inclusion |
|
|
| Mon, 29 Jun 2026 10:46:38 GMT |
Costa Rica Canopy Tours: Choosing Experiences That Match Your Com... |
directory-listing |
|
|
| Tue, 07 Jul 2026 12:59:00 GMT |
BUG Bounty — The Upload Was Protected, But the File Was Public. |
bug-bounty-hunter |
|
|
| Fri, 17 Jul 2026 07:22:47 GMT |
Web Pentester’s Guide to Thinking Like an IoT Pentester |
vapt |
|
|
| Tue, 26 May 2026 23:44:37 GMT |
Intigriti May 2026 Challenge: XSS via Stored Payload & SCA Shield... |
xss-bypass |
|
|
| Tue, 28 Apr 2026 20:00:52 GMT |
Official Blind XSS Platform Update (2026) |
xss-bypass |
|
|
| Sat, 04 Jul 2026 14:50:11 GMT |
Dosya Sistemine Sızış: Directory Traversal ve LFI Zafiyetlerin... |
local-file-inclusion |
|
|
| Sat, 11 Jul 2026 12:12:35 GMT |
HACKING JULY DAY 10:JUICE-SHOP XSS |
xss-vulnerability |
|
|
| Thu, 20 Nov 2025 09:45:04 GMT |
Timber Doors in Surrey: Style, Durability, and Value Explained |
dorking |
|
|
| Thu, 28 May 2026 15:59:28 GMT |
File Inclusion Vulnerability Assessment |
file-inclusion |
|
|
| Mon, 13 Apr 2026 06:37:51 GMT |
File Inclusion on DVWA |
file-inclusion |
|
|
| Thu, 25 Jun 2026 22:08:54 GMT |
PortSwigger : DOM XSS in jQuery Selector Sink Using a Hashchange ... |
cross-site-scripting |
|
|
| Sun, 21 Jun 2026 18:31:00 GMT |
Can You Build a Career on Bugcrowd? I’m Going to Test It. (Day ... |
bugcrowd, bounty-program |
|
|
| Tue, 14 Jul 2026 12:56:04 GMT |
How I Demoted a Project Owner to Viewer Using Just Burp Suite —... |
hackerone |
|
|
| Thu, 16 Jul 2026 18:46:00 GMT |
Password Reset Vulnerabilities List |
application-security |
|
|
| Mon, 18 May 2026 00:04:46 GMT |
GOOGLE DORK Ä°LE BÄ°LGÄ°YÄ° HIZLI VE DOÄžRU BULMA |
google-dorking, google-dork, github-dorking |
|
|
| Thu, 16 Jul 2026 13:47:10 GMT |
From Source Code Leak to Full Session Forgery: How Hardcoded Secr... |
information-disclosure |
|
|
| Thu, 19 Feb 2026 12:53:45 GMT |
Lab: Web cache poisoning via HTTP/2 request tunnelling | Portswi... |
web-cache-poisoning |
|
|
| Tue, 07 Jul 2026 02:35:59 GMT |
Search Skills: Mastering Cyber Security Research & OSINT |
shodan |
|
|
| Sun, 19 Jul 2026 17:08:15 GMT |
SLUM KIDS SHOULDN'T DREAM BIG. |
security |
|
|
| Sat, 18 Jul 2026 18:28:38 GMT |
React’s Golden Rule: Fixing the Mismatched Checklist Error |
bugs |
|
|
| Mon, 13 Jul 2026 08:48:39 GMT |
Censys 是什麼？和 Shodan 常被拿來比較，兩者實際å·... |
censys |
|
|