| Thu, 15 Oct 2026 00:01:02 GMT |
Cisco’s Shadow AI Report Scared Me : Here’s What Every SOC An... |
cybersecurity |
Yes |
Yes |
| Thu, 15 Oct 2026 00:05:12 GMT |
The Reconstitution of Motivation: Tom Pearl, and the Pursuit of C... |
cybersecurity |
Yes |
Yes |
| Thu, 15 Oct 2026 00:04:44 GMT |
Most Cookies | CyLab (PicoCTF) | Medium | Write-up |
penetration-testing |
Yes |
Yes |
| Thu, 15 Oct 2026 00:35:05 GMT |
If It Ends the Same, Let It Through� — The Comparison Operato... |
cve |
Yes |
Yes |
| Thu, 15 Oct 2026 00:03:35 GMT |
More AI Adoption, Greater Cyber Risk, and the Hidden Economics of... |
cybersecurity |
Yes |
Yes |
| Wed, 14 Oct 2026 23:57:52 GMT |
DumpMe Lab — Endpoint Forensics Writeup |
cybersecurity |
Yes |
|
| Wed, 14 Oct 2026 22:27:23 GMT |
New Hire (HackSmarter) |
cybersecurity, penetration-testing, hacking, ethical-hacking |
Yes |
|
| Wed, 14 Oct 2026 22:24:10 GMT |
Unauthenticated S3 Write Access to Remote Code Execution: Anatomy... |
cybersecurity, penetration-testing, ethical-hacking |
Yes |
|
| Wed, 14 Oct 2026 23:10:04 GMT |
Is Your Personal Data Really Safe? |
cybersecurity |
Yes |
|
| Wed, 14 Oct 2026 22:28:06 GMT |
My Body |
vulnerability |
Yes |
|
| Wed, 14 Oct 2026 23:20:03 GMT |
DELETED DOES NOT MEAN GONE |
cybersecurity |
Yes |
|
| Wed, 14 Oct 2026 22:49:22 GMT |
Pivoting From a Single Domain to 36: A WhatsApp GhostPairing Inve... |
cybersecurity |
Yes |
|
| Wed, 14 Oct 2026 22:24:45 GMT |
Your Bank Statement PDF Asks for a Password Every Time? How to Re... |
cybersecurity |
Yes |
|
| Wed, 14 Oct 2026 02:31:01 GMT |
I Studied Cybersecurity. Here Are 10 Things I Stopped Doing Onlin... |
cyber-security-awareness |
|
|
| Wed, 19 Nov 2025 19:44:02 GMT |
The Pulse of Liquidity: How DorkFi’s Interest Rates Adapt in Re... |
dorks |
|
|
| Thu, 10 Sep 2026 10:24:10 GMT |
CVE-2026–69194: Cross-Site Scripting in FileRise |
xss-bypass |
|
|
| Wed, 14 Oct 2026 12:06:22 GMT |
One Data Protection Strategy Is Not Enough: Understanding Tokeniz... |
cyber-security-awareness |
|
|
| Thu, 13 Aug 2026 13:01:04 GMT |
¡Hazte de nivel VIP 2 enseguida! |
bounty-program |
|
|
| Sun, 11 Oct 2026 08:01:07 GMT |
How I Broke An Invoicing App: The Story of My First CVE |
cve |
|
|
| Thu, 20 Nov 2025 09:45:04 GMT |
Timber Doors in Surrey: Style, Durability, and Value Explained |
dorking |
|
|
| Wed, 14 Oct 2026 08:11:03 GMT |
How We Hardened Tycoonz’s Email Infrastructure Against Spoofing... |
cyber-security-awareness |
|
|
| Mon, 06 Apr 2026 21:45:53 GMT |
Cookie(Çerez) Türleri ve Pentest Açısından Önemi |
web-pentest |
|
|
| Mon, 14 Sep 2026 15:09:52 GMT |
Guided Pentest: Chaining Web Vulnerabilities to RCE |
remote-code-execution |
|
|
| Sat, 25 Apr 2026 14:46:05 GMT |
File Inclusion— Skills Assesment (HTB) |
file-inclusion |
|
|
| Sun, 06 Sep 2026 01:53:14 GMT |
How to Configure Subfinder with API Keys for Better Passive Subdo... |
recon |
|
|
| Wed, 14 Oct 2026 18:22:02 GMT |
Telnet and SSH Access Control Lab |
information-security |
|
|
| Thu, 03 Sep 2026 16:11:38 GMT |
Part 1 — Cross-Site Scripting (XSS): What It Is & How It Ac... |
cross-site-scripting |
|
|
| Fri, 09 Oct 2026 08:48:33 GMT |
Who’s Who in Banking: CIF, GCIF, Account Numbers and IBAN Expla... |
bug-bounty-hunter |
|
|
| Tue, 01 Sep 2026 08:10:36 GMT |
One Researcher Earned $811,000 Hunting Bugs for Google |
bug-bounty-hunter |
|
|
| Wed, 01 Jul 2026 11:07:22 GMT |
Archangel TryHackMe Walkthrough | LFI, Log Poisoning & Linux Pri... |
local-file-inclusion |
|
|
| Fri, 09 Oct 2026 10:35:41 GMT |
VULNERABLE SHOPPING |
file-upload |
|
|
| Sun, 11 Oct 2026 18:29:35 GMT |
How I Discovered an Architectural Security Boundary Bypass in PGP... |
security-research |
|
|
| Wed, 14 Oct 2026 14:17:55 GMT |
Cloudflare Security: Addressing Image Resizing Misconfiguration &... |
web-security |
|
|
| Wed, 14 Oct 2026 01:36:14 GMT |
Menemukan 3 Kerentanan di 3 Subdomain Nokia dalam Sehari (Semuany... |
bug-bounty-writeup |
|
|
| Mon, 27 Jul 2026 19:32:54 GMT |
Brew Bank Official Writeup | EYCC CTF |
lfi |
|
|
| Tue, 29 Sep 2026 21:43:45 GMT |
SSRF & Git ext:: [HTB Editorial Walkthrough] |
ssrf |
|
|
| Sat, 26 Sep 2026 16:58:15 GMT |
CVE-2026-61704: A DNS check is not a connection guarantee |
security-research |
|
|
| Wed, 30 Sep 2026 13:59:43 GMT |
Unauthenticated XXE leading to SSRF and internal resource access |
bugbounty-writeup, ssrf |
|
|
| Wed, 07 Oct 2026 06:57:32 GMT |
Unauthenticated IDOR in Marketing Consent Management: From Enumer... |
hackerone, idor |
|
|
| Fri, 25 Sep 2026 03:44:00 GMT |
[Padelify] — Blind XSS to Moderator Account Takeover, WAF Byp... |
lfi |
|
|
| Wed, 14 Oct 2026 11:39:58 GMT |
ENI, Adversarial Poetry, and the Style-Shaped Hole in LLM Safety |
security-research |
|
|
| Wed, 14 Oct 2026 14:46:10 GMT |
Bypassing Login with SQL Injection: PortSwigger Lab Walkthrough. |
bug-bounty, web-security, ethical-hacking |
|
|
| Wed, 25 Feb 2026 01:47:45 GMT |
How I Found a Path Traversal in the Rancher Dashboard via HAR Rep... |
web-pentest |
|
|
| Mon, 20 Jul 2026 06:24:37 GMT |
Using Cache Deception Techniques to Discover Cache Poisoning Vect... |
web-cache-poisoning |
|
|
| Sun, 15 Feb 2026 09:26:13 GMT |
TryHackMe Walkthrough -Subdomain Enumeration |
subdomain-enumeration |
|
|
| Sun, 13 Sep 2026 17:09:09 GMT |
Ghost Flight — PwnSec CTF 2026 |
google-dork |
|
|
| Wed, 14 Oct 2026 21:01:02 GMT |
“90% Certain� Is Not Evidence of Spies Inside an AI Lab. |
security |
|
|
| Wed, 14 Oct 2026 15:02:17 GMT |
HawkEye lab — CyberDefenders Writeup |
infosec |
|
|
| Wed, 07 Oct 2026 02:28:49 GMT |
HTML Injections Part 1: Adding a Vulnerable Code |
cross-site-scripting |
|
|
| Mon, 13 Jul 2026 11:04:30 GMT |
Cache Poisoning: From Cache Hits to Bounty |
web-cache-poisoning |
|
|
| Tue, 13 Oct 2026 05:39:13 GMT |
Critical Business Logic Vulnerability in E-commerce Checkout |
security-research |
|
|
| Tue, 13 Oct 2026 01:28:04 GMT |
CVE-2026–40281 Explained: A Patch That Guarded “=� on One S... |
cve |
|
|
| Wed, 14 Oct 2026 13:14:02 GMT |
I Read HackerOne’s New Report So You Don’t Have To. Here’s ... |
bug-bounty, bug-bounty-tips |
|
|
| Mon, 20 Jul 2026 10:56:47 GMT |
Task 2 -> OSINT Techniques (Google Dorking) |
google-dorking |
|
|
| Sun, 11 Oct 2026 18:33:33 GMT |
Recreating the DeepSeek Database Leak Wiz Research Found |
information-disclosure |
|
|
| Mon, 29 Jun 2026 01:03:39 GMT |
Belajar tentang File Inclusion dalam Penetration Testing |
file-inclusion |
|
|
| Wed, 14 Oct 2026 13:01:04 GMT |
From Source Code to Exploit: How Shannon Rethinks AI Penetration ... |
penetration-testing |
|
|
| Tue, 13 Oct 2026 08:17:30 GMT |
The RDP Bug That Only Struck When Someone Closed Their Window |
bugs |
|
|
| Mon, 07 Sep 2026 13:31:02 GMT |
Building GhostShell: A Modern Python & Flask Security Suite for A... |
vulnerability-scanning |
|
|
| Sat, 10 Oct 2026 05:32:48 GMT |
VAPTOR AI Expands Compliance Mapping with POPIA and SOC 2 Framewo... |
pentest |
|
|
| Sat, 25 Oct 2025 12:23:25 GMT |
How to find leaks on GitHub as a beginner. Logic is main key |
github-dorking |
|
|
| Sun, 23 Aug 2026 11:07:57 GMT |
How I Found My First LLM Vulnerability and Escalated it to Admin ... |
vulnerability-disclosure |
|
|
| Fri, 12 Jun 2026 12:04:09 GMT |
The Print Button That Handed Me Your Account: Stored XSS to Full ... |
xss-bypass |
|
|
| Mon, 12 Oct 2026 12:58:28 GMT |
The Blast Radius of Zero: Scoped API Keys for LLM Traffic |
api-key |
|
|
| Wed, 14 Oct 2026 10:49:30 GMT |
Cyber Security Training Near Me |
cyber-security-awareness |
|
|
| Sun, 27 Sep 2026 20:00:02 GMT |
Building Check-SuspiciousActivity: A Read-Only Windows Security S... |
cybersecurity-tools |
|
|
| Mon, 13 Apr 2026 06:37:51 GMT |
File Inclusion on DVWA |
file-inclusion |
|
|
| Fri, 21 Aug 2026 10:55:32 GMT |
Managing Scan Results in Metasploit |
recon |
|
|
| Thu, 08 Oct 2026 21:21:45 GMT |
Dari Vulnerability Jadi Proof-of-Concept: Mengapa Dunia Keamanan ... |
cyber-sec |
|
|
| Fri, 25 Sep 2026 10:17:51 GMT |
The Key That Isn’t Stored: Ketika Cacat Produksi Chip Jadi Kunc... |
cyber-sec |
|
|
| Wed, 14 Oct 2026 21:06:59 GMT |
Auto Dealership Security Services: What Most Dealers Learn Too La... |
security |
|
|
| Mon, 18 May 2026 00:04:46 GMT |
GOOGLE DORK Ä°LE BÄ°LGÄ°YÄ° HIZLI VE DOÄžRU BULMA |
github-dorking |
|
|
| Tue, 13 Oct 2026 06:46:01 GMT |
Osuvox Forums — XSS EXPLOIT | CYBERCHESS2026 |
xss-attack |
|
|
| Wed, 14 Oct 2026 16:35:55 GMT |
bWAPP Administrative Portal Access Control |
ethical-hacking |
|
|
| Wed, 06 May 2026 11:36:01 GMT |
Google Dorking |
dorking |
|
|
| Wed, 14 Oct 2026 08:55:37 GMT |
HOW TO WORK ON SOME PORT ON Metasploit able |
exploit |
|
|
| Mon, 05 Oct 2026 14:26:50 GMT |
VAPT Testing Cost in India: What Businesses Should Know in 2026 |
vapt |
|
|
| Sun, 30 Aug 2026 12:35:09 GMT |
Nmap for finding your initial clues |
pentest |
|
|
| Wed, 17 Jun 2026 07:53:43 GMT |
Operation Liwanag: The Same Map a Chinese Intelligence Asset Drew... |
censys |
|
|
| Wed, 14 Oct 2026 12:16:08 GMT |
Cheap Vulnerability Scan vs Manual Pentest: What Are You Actually... |
pentesting |
|
|
| Sun, 11 Oct 2026 01:24:19 GMT |
Keep Your Relay API Key Out of Git: A 5-Minute Checklist |
api-key |
|
|
| Wed, 14 Oct 2026 02:22:48 GMT |
Reflected XSS di Aplikasi Pelaporan Kecamatan Pemerintah Kabupate... |
bug-bounty-writeup |
|
|
| Sat, 20 Dec 2025 18:21:40 GMT |
N0aziXss SubSpectre: Advanced Subdomain Discovery with Intelligen... |
subdomain-enumeration |
|
|
| Sun, 19 Jul 2026 21:01:10 GMT |
The Secret Was Just One Folder Away |
file-inclusion |
|
|
| Wed, 14 Oct 2026 12:01:01 GMT |
Animalistic desires in a toy box. |
vulnerability |
|
|
| Wed, 14 Oct 2026 19:08:47 GMT |
On Beginnings and Monsters |
vulnerability |
|
|
| Wed, 14 Oct 2026 19:01:32 GMT |
What Is POS Software? A Complete Guide for Retail Businesses in 2... |
information-technology |
|
|
| Fri, 09 Oct 2026 18:07:57 GMT |
From CSPT to DOM XSS: Chaining an Open Redirect with Malicious JS... |
xss-attack |
|
|
| Tue, 23 Jun 2026 07:06:16 GMT |
Bug Bounty Recon Mastery →Advanced Reconnaissance and Attack Su... |
subdomain-enumeration |
|
|
| Fri, 21 Aug 2026 05:15:30 GMT |
FORCEDENTRY — Pegasus’ning iMessage orqali zero-click hujumi ... |
cyber-sec |
|
|
| Wed, 14 Oct 2026 17:42:39 GMT |
Security Misconfiguration : OWASP Top 10 (2025) — A02 |
bug-bounty, vapt |
|
|
| Tue, 06 Oct 2026 09:32:32 GMT |
When the Browser and the Bytes Disagree |
file-upload |
|
|
| Fri, 28 Jun 2024 14:51:14 GMT |
X-Forwarded HTTP header-ləri : Qısa izah |
log-poisoning |
|
|
| Tue, 13 Oct 2026 08:39:40 GMT |
Breaking Business Logic: Understanding Price Manipulation in Web ... |
vapt |
|
|
| Wed, 13 May 2026 07:37:16 GMT |
How to Find Subdomains Using Shodan and the Favicon Hash Trick |
subdomain-enumeration |
|
|
| Wed, 07 Oct 2026 13:17:16 GMT |
Critical BAC: IDOR + Weak Appointment Code Enables Unauthorized A... |
idor |
|
|
| Mon, 29 Jun 2026 06:52:04 GMT |
My First Cross-Site Scripting (XSS) Vulnerability: A Journey of P... |
xss-bypass |
|
|
| Wed, 14 Oct 2026 16:10:42 GMT |
Ransomware Defense in 2026: Beyond Prevention |
information-security |
|
|
| Tue, 14 Apr 2026 13:07:05 GMT |
My “Gemini� Is Named Mike |
dorks |
|
|
| Wed, 14 Oct 2026 18:13:13 GMT |
Linux Soc Investigation : How Can YOu rEach Host From The Contain... |
hacking |
|
|
| Wed, 14 Oct 2026 15:12:08 GMT |
How to Route Clean and Suspicious File Uploads in Node.js |
application-security |
|
|
| Sat, 06 Jun 2026 07:18:44 GMT |
Update: The Ending of My $500 Loss and Web Cache Poisoning Story. |
web-cache-poisoning |
|
|
| Wed, 07 Oct 2026 22:53:53 GMT |
My path in the cybersecurity world began back in 2018, but 2024 m... |
vapt |
|
|
| Wed, 23 Sep 2026 07:31:01 GMT |
SSRF |
ssrf |
|
|
| Sat, 26 Sep 2026 16:56:25 GMT |
Why 3D-Printed Lockpicks are Unreliable |
security-research |
|
|
| Tue, 26 May 2026 23:44:37 GMT |
Intigriti May 2026 Challenge: XSS via Stored Payload & SCA Shield... |
xss-bypass |
|
|
| Wed, 14 Oct 2026 15:30:14 GMT |
CyberDefenders - Tomcat Takeover Lab |
infosec |
|
|
| Sat, 04 Jul 2026 14:50:11 GMT |
Dosya Sistemine Sızış: Directory Traversal ve LFI Zafiyetlerin... |
local-file-inclusion |
|
|
| Thu, 13 Aug 2026 16:11:01 GMT |
Vulnerability Scanning vs Penetration Testing: A Straight Answer,... |
vulnerability-scanning |
|
|
| Wed, 07 Oct 2026 05:23:11 GMT |
The Hidden Cost of File Format Chaos |
file-upload |
|
|
| Thu, 02 Apr 2026 18:59:50 GMT |
File Inclusion (LFI/RFI) — Extracting Sensitive Data from confi... |
file-inclusion |
|
|
| Wed, 01 Jul 2026 11:46:00 GMT |
Convierte acciones sencillas en recompensas reales |
bounty-program |
|
|
| Sun, 21 Jun 2026 18:31:00 GMT |
Can You Build a Career on Bugcrowd? I’m Going to Test It. (Day ... |
bounty-program |
|
|
| Thu, 24 Sep 2026 02:52:39 GMT |
Choosing the Right Bug Bounty Platform: HackerOne vs Bugcrowd vs ... |
bugcrowd |
|
|
| Wed, 14 Oct 2026 15:55:25 GMT |
Cybersecurity at Galgotias University: Protecting the Digital Wor... |
ethical-hacking |
|
|
| Tue, 19 May 2026 14:13:53 GMT |
Guildford to Box Hill |
dorking |
|
|
| Wed, 14 Oct 2026 09:15:25 GMT |
Node.js Buffers Explained: What Happens Below JavaScript Strings? |
file-upload |
|
|
| Fri, 18 Sep 2026 08:12:55 GMT |
Reflected XSS via dangerouslySetInnerHTML: When the API Is Safe b... |
xss-vulnerability |
|
|
| Tue, 13 Oct 2026 17:50:38 GMT |
OWASP Top 10 for LLM Applications — Revised Write-up |
web-security |
|
|
| Wed, 14 Oct 2026 13:01:05 GMT |
The Attacker Doesn’t Need to Know Your Programming Language Any... |
application-security |
|
|
| Thu, 11 Sep 2025 22:20:14 GMT |
It’s Coming: DorkFi Delivers PreFi Rewards Surge |
dorking |
|
|
| Tue, 16 Jun 2026 13:11:36 GMT |
Understanding Web Cache Poisoning via Unkeyed Headers: A PortSwig... |
web-cache-poisoning |
|
|
| Sat, 26 Sep 2026 05:56:36 GMT |
From File Preview to Server-Side File Read: Testing DuckDB SQL Ex... |
local-file-inclusion |
|
|
| Tue, 06 Oct 2026 05:13:05 GMT |
AIMap in Cybersecurity: Visualizing the Hidden Attack Surface |
cybersecurity-tools |
|
|
| Thu, 28 May 2026 15:59:28 GMT |
File Inclusion Vulnerability Assessment |
file-inclusion |
|
|
| Thu, 13 Feb 2025 03:29:37 GMT |
ZoomEye Meets DeepSeek: AI-Powered Cyberspace Intelligence |
zoomeye |
|
|
| Sun, 17 May 2026 02:56:19 GMT |
The 3 Bug Hunting Habits That Made Me Go From $0 to $5k (And None... |
bug-bounty-program |
|
|
| Wed, 30 Sep 2026 13:27:19 GMT |
Knowing the Name of the Thing Isn’t the Same as Knowing How to ... |
bugbounty-writeup |
|
|
| Wed, 05 Aug 2026 22:36:52 GMT |
The Hollow Shell | Hacker Holidays Day 10 | TryHackMe Writeup |
local-file-inclusion |
|
|
| Sat, 18 Jul 2026 06:52:39 GMT |
[Support] — Exploiting LFI, Weak Session Cookies, and Command... |
local-file-inclusion |
|
|
| Tue, 13 Oct 2026 23:10:33 GMT |
How Camera and Microphone Permissions Can Be Silently Abused (abu... |
security-research |
|
|
| Wed, 14 Oct 2026 13:29:55 GMT |
Exploiting Exposed Encryption Keys in Web Applications |
pentesting |
|
|
| Fri, 05 Jun 2026 04:49:28 GMT |
Price Manipulation in Payment Gateway / Shopping Cart |
vdp |
|
|
| Fri, 17 Jul 2026 16:56:29 GMT |
CTF: Archangel TryhackMe Room |
local-file-inclusion |
|
|
| Sun, 09 Aug 2026 18:20:11 GMT |
I Took Over Someone’s Subdomain and Put a Cat On It |
subdomain-takeover |
|
|
| Tue, 25 Aug 2026 02:21:01 GMT |
Recon Is the Whole Game — You’re Just Not Playing It Righ... |
google-dork |
|
|
| Wed, 14 Oct 2026 03:31:01 GMT |
Pickle Rick: TryHackMe Walkthrough |
pentesting |
|
|
| Fri, 17 Apr 2026 19:01:54 GMT |
The Ultimate Guide to Wayback Machine Dorking for Deleted Leaks |
dorking |
|
|
| Fri, 07 Aug 2026 20:55:06 GMT |
Lá»— hổng bảo máºt trong bà n phÃm Tiếng Việt của Mic... |
information-disclosure |
|
|
| Thu, 24 Sep 2026 17:40:15 GMT |
Where Convenience Forgot to Lock the Door |
exploit, rce |
|
|
| Sun, 04 Oct 2026 09:42:42 GMT |
How I Used Shodan Dorks to Find a Hidden Bug Bounty Program | by... |
shodan |
|
|
| Wed, 14 Oct 2026 20:56:01 GMT |
He Gave Me His Password. I Got Folded In. I Didn’t Feel Closer. |
vulnerability |
|
|
| Wed, 09 Sep 2026 11:01:53 GMT |
Wild Bounty Showdown PG Soft di HORE889: Pola Cascade |
bounties |
|
|
| Wed, 30 Sep 2026 11:29:33 GMT |
HITCON 2026 talk reviews |
exploit |
|
|
| Fri, 25 Sep 2026 14:36:02 GMT |
It Thought It Was Only a Test: The Strange Case of Gemini and the... |
vulnerability-disclosure |
|
|
| Wed, 14 Oct 2026 16:49:17 GMT |
The Comprehensive Guide to Design File Types |
file-upload |
|
|
| Thu, 09 Jul 2026 12:43:47 GMT |
The Easy Bug Series | #01 |
bounty-program |
|
|
| Sat, 08 Aug 2026 07:05:04 GMT |
Chaining Information Disclosure, SMB Access, and Sudo Misconfigur... |
information-disclosure |
|
|
| Fri, 11 Sep 2026 05:41:13 GMT |
8 Must-Know Ethical Hacking Tools for Modern Security Teams in 20... |
cybersecurity-tools |
|
|
| Wed, 07 Oct 2026 13:13:34 GMT |
TryHackMe: Corridor — When Obscurity Fails Against IDOR |
idor |
|
|
| Sat, 10 Oct 2026 04:55:05 GMT |
Your Attack Surface Is Telling a Story. Are You Paying Attention? |
recon |
|
|
| Sat, 30 May 2026 11:25:12 GMT |
Cross-Site Scripting (XSS) via Client-Side Filter Bypass |
xss-bypass |
|
|
| Thu, 24 Sep 2026 12:41:28 GMT |
Anatomy of Predatory Fintech: Bedah Teknis di Balik Teror Pinjol ... |
cyber-sec |
|
|
| Sun, 30 Aug 2026 07:09:05 GMT |
Google Dorking for Cybersecurity: A Beginner’s Guide to Practic... |
google-dorking |
|
|
| Tue, 13 Oct 2026 03:49:30 GMT |
Seeing the Intention: The Warning Came Before the Deployment |
security-research |
|
|
| Fri, 09 Oct 2026 14:55:15 GMT |
Cohort Machine Write-up (Easy Linux) — HTB Walkthrough |
ssrf |
|
|
| Mon, 31 Aug 2026 16:53:51 GMT |
Critical Vulnerability Alert: CVE-2026–77806 — SPIP Unauthen... |
remote-code-execution |
|
|
| Fri, 25 Sep 2026 06:12:21 GMT |
The best event experiences start at the entrance. |
directory-listing |
|
|
| Sun, 22 Oct 2023 19:57:30 GMT |
Performing a Log Poisoning Attack |
log-poisoning |
|
|
| Mon, 28 Sep 2026 13:22:18 GMT |
PortSwigger Lab: Web shell upload via race condition |
rce |
|
|
| Thu, 02 Jul 2026 16:02:56 GMT |
Strengthening Web3 Trust with Blockchain Incident Response & Fore... |
bug-bounty-program |
|
|
| Thu, 04 Dec 2025 04:45:36 GMT |
What is Google Dorking? |
dorking |
|
|
| Wed, 09 Sep 2026 12:12:33 GMT |
Getting Started with OSINT: My First Steps with Google Dorking |
google-dork |
|
|
| Fri, 02 Oct 2026 06:56:42 GMT |
Secret Supernovas | CSS CTF Semester 2 2026 Writeup |
information-disclosure |
|
|
| Wed, 14 Oct 2026 20:46:01 GMT |
Dead-Letter Queues in Kafka: How to Recover Poison Messages Witho... |
information-technology |
|
|
| Wed, 14 Oct 2026 08:00:46 GMT |
Harmless Link Becomes RCE |
bug-bounty-writeup |
|
|
| Wed, 14 Oct 2026 13:14:47 GMT |
Unemployment Diaries |
information-technology |
|
|
| Wed, 14 Oct 2026 12:27:51 GMT |
Proposta de Segurança, Transparência e Rastreabilidade nas Cobr... |
information-security |
|
|
| Fri, 09 Oct 2026 08:59:48 GMT |
List of all Popular XSS Payloads |
cross-site-scripting, xss-vulnerability |
|
|
| Wed, 30 Sep 2026 04:12:25 GMT |
Bitget’s $388 Million Hack: A Technical Post-Mortem and the Roa... |
exploit |
|
|
| Wed, 14 Oct 2026 09:12:23 GMT |
One Random Search Led Me to Exposed PDFs During a Bug Bounty Hunt |
bug-bounty, bug-bounty-tips, recon |
|
|
| Wed, 07 Oct 2026 01:28:46 GMT |
IDOR Trick Leads to Damage Across the Entire Business |
bugbounty-writeup |
|
|
| Fri, 14 Aug 2026 17:01:43 GMT |
Dorks that could get you a good bounty in 2026 |
google-dorking |
|
|
| Thu, 20 Nov 2025 17:16:47 GMT |
The Health Factor: How DorkFi Keeps Your Position Safe |
dorks |
|
|
| Tue, 29 Sep 2026 01:23:50 GMT |
Hack The Box Trick Write-Up: From DNS Zone Transfer to Fail2Ban R... |
lfi |
|
|
| Wed, 14 Oct 2026 14:58:17 GMT |
SOC Analyst Day 8: Linux Investigation, Process & Network Triage,... |
infosec, ethical-hacking |
|
|
| Mon, 18 May 2026 14:37:14 GMT |
File Inclusion - Challenge Part | TryHackMe Walkthrough |
file-inclusion |
|
|
| Thu, 03 Sep 2026 22:40:43 GMT |
How a Simple Dork Led to a Critical 10.0 CVSS |
vulnerability-disclosure |
|
|
| Wed, 07 Oct 2026 14:16:21 GMT |
How I Got Paid for Turning an Image Fetcher into an Arbitrary Fil... |
ssrf |
|
|
| Tue, 13 Oct 2026 03:31:01 GMT |
10 GitHub OSINT Tools I Actually Reach For During Recon |
bug-bounty-tips, bug-bounty-writeup |
|
|
| Wed, 14 Oct 2026 12:54:26 GMT |
The Attack Nobody Claimed: #OpFrance, Cyber-Physical Sabotage and... |
information-technology |
|
|
| Mon, 12 Oct 2026 14:40:52 GMT |
8 Distributed Systems Mistakes That Turn Small Bugs Into Producti... |
bugs |
|
|
| Wed, 14 Oct 2026 09:48:25 GMT |
Kenobi THM Room |
pentesting |
|
|
| Wed, 14 Oct 2026 14:32:57 GMT |
Where can I Find a Reliable Hacker with Professional Ethical Serv... |
ethical-hacking |
|
|
| Mon, 29 Jun 2026 10:46:38 GMT |
Costa Rica Canopy Tours: Choosing Experiences That Match Your Com... |
directory-listing |
|
|
| Mon, 24 Aug 2026 03:01:03 GMT |
Subdomain Takeover: When a Dead DNS Record Becomes Your Entry Poi... |
subdomain-takeover |
|
|
| Mon, 21 Sep 2026 08:34:16 GMT |
Firebase API Keys: Got a Callback From A Potential Client |
api-key |
|
|
| Wed, 14 Oct 2026 15:28:03 GMT |
Was I really just an object to you? |
vulnerability |
|
|
| Thu, 08 Oct 2026 09:00:44 GMT |
Is Your Business Ready for Cyberattacks in 2026? How VAPT Strengt... |
vapt |
|
|
| Tue, 21 Apr 2026 14:42:50 GMT |
Web Security Series # 16— Exploiting Local File Inclusion (LFI) |
file-inclusion |
|
|
| Mon, 13 Jul 2026 08:48:39 GMT |
Censys 是什麼？和 Shodan 常被拿來比較，兩者實際å·... |
censys |
|
|
| Mon, 12 Oct 2026 15:26:08 GMT |
I Asked How Guests Get Their Identity — and Found a Meeting Log... |
bug-bounty-writeup |
|
|
| Sun, 14 Jun 2026 13:21:02 GMT |
Subdomain Enumeration: A Core Technique Every Bug Hunter Must Mas... |
subdomain-enumeration |
|
|
| Tue, 13 Oct 2026 13:58:34 GMT |
TryHackMe | Archangel — THM CTF |
rce, lfi |
|
|
| Thu, 24 Sep 2026 15:05:11 GMT |
Introducing QR Jacking: When Your Branded QR Codes Aren’t Yours |
subdomain-takeover |
|
|
| Wed, 17 Jun 2026 08:46:50 GMT |
Amazon Prime for Young Adults — Why Every College Soccer Fan Ne... |
bounties |
|
|
| Tue, 29 Sep 2026 02:55:44 GMT |
Why API Keys Outlive Their Owners and OAuth Tokens Do Not |
api-key |
|
|
| Wed, 23 Sep 2026 13:57:18 GMT |
How to Promote Your Business Online Without a Website in India |
directory-listing |
|
|
| Sat, 04 Jul 2026 14:47:14 GMT |
AI is built into apps now. What does that mean for data security? |
cyber-sec |
|
|
| Sat, 06 Dec 2025 23:06:15 GMT |
Big News from DorkFi — PreFi Rewards Drop + Contest Live! |
dorks |
|
|
| Mon, 12 Oct 2026 01:39:57 GMT |
CVE-2026–49869 Explained: How One String Comparison Hands Root ... |
cve |
|
|
| Tue, 22 Sep 2026 08:06:39 GMT |
Kok Bisa Sebuah Angka di Layar Permission Berujung Jadi Ancaman? |
cyber-sec |
|
|
| Wed, 02 Sep 2026 06:37:50 GMT |
Unminify — picoCTF Write-up | Sometimes the Flag Is Right in F... |
information-disclosure |
|
|
| Wed, 14 Oct 2026 17:59:38 GMT |
Case Notes: A Phishing Email, a Fake Invoice, and a Backdoor That... |
cyber-security-awareness |
|
|
| Thu, 06 Aug 2026 20:28:38 GMT |
Kali CTF Writeup: Uncovering “the unbroken shelf� (OSINT) |
google-dork |
|
|
| Sat, 03 Oct 2026 19:49:47 GMT |
AI-POWERED APPLICATION SECURITY WITH HCL APPSCAN |
cybersecurity-tools |
|
|
| Tue, 14 Jul 2026 17:10:47 GMT |
File Inclusion Challenge (TryHackMe) |
file-inclusion |
|
|
| Fri, 09 Oct 2026 13:48:27 GMT |
My First Passive Reconnaissance Using Shodan | My Application Se... |
shodan |
|
|
| Mon, 21 Sep 2026 07:59:14 GMT |
Installing Nmap on Windows: A Quick Start Guide |
recon |
|
|
| Mon, 05 Oct 2026 17:45:18 GMT |
Catching a Dangling CNAME: How an Unclaimed Squarespace Subdomain... |
subdomain-takeover |
|
|
| Tue, 13 Oct 2026 21:31:56 GMT |
Stealing Plaintext Windows Credentials: LogonStealer |
pentesting |
|
|
| Wed, 19 Aug 2026 07:58:40 GMT |
Recruit — TryHackMe Walkthrough: From Local File Inclusion to A... |
local-file-inclusion |
|
|
| Wed, 07 Oct 2026 18:46:21 GMT |
My Practical Bug Hunting Checklist: From Recon to Real-World Web,... |
vapt |
|
|
| Mon, 13 Apr 2026 03:31:01 GMT |
Google Dorks Google Ko Bana Do Apna Hacking Tool: Free Mein Bugs ... |
github-dorking |
|
|
| Wed, 14 Oct 2026 04:09:38 GMT |
Critical Docker Hub Vulnerability Could Let Attackers Impersonate... |
cyber-security-awareness |
|
|
| Tue, 15 Jul 2025 12:15:58 GMT |
“Secure� OPC UA Setups Are Being Hacked — Here’s Why |
censys |
|
|
| Sun, 16 Aug 2026 09:23:56 GMT |
Critical Security Assessment of Veilo Privacy Protocol Smart Cont... |
bounties |
|
|
| Thu, 20 Aug 2026 09:31:01 GMT |
Blind SSRF Without Callbacks: How I Used Timing to Prove Kubernet... |
cyber-sec |
|
|
| Tue, 29 Sep 2026 16:06:01 GMT |
Critical Security Alert: Unauthenticated LFI to RCE in Visual Com... |
lfi |
|
|
| Tue, 06 Oct 2026 01:30:32 GMT |
TryHackMe: Neighbour — Exploiting Broken Access Control & IDOR |
idor |
|
|
| Thu, 17 Sep 2026 12:36:19 GMT |
EXPLOITING STORED XSS TO STEAL COOKIES |
xss-vulnerability |
|
|
| Wed, 15 Jul 2026 12:56:40 GMT |
I Just Wanted a Cold Coffee. Instead I Found a Master Key to a Ve... |
vdp |
|
|
| Wed, 14 Oct 2026 15:13:59 GMT |
A2A’s Signed Agent Cards Prove Integrity, Not Identity |
cyber-security-awareness |
|
|
| Thu, 08 Oct 2026 15:43:40 GMT |
Hunting archived URLs for information disclosure |
vdp, information-disclosure |
|
|
| Sat, 10 Oct 2026 01:55:30 GMT |
A deep Dive into the traits of Seven Open-Weight Models |
api-key |
|
|
| Fri, 26 Jun 2026 06:46:44 GMT |
How Google Dorking Can Streamline Your SEO Research Process |
google-dorking |
|
|
| Thu, 01 Oct 2026 15:48:07 GMT |
My First Time Doing GitHub & Google Dorking on a Real Target |
google-dorking, github-dorking |
|
|
| Thu, 24 Sep 2026 14:30:09 GMT |
How to Harden PHP So a File-Inclusion Bug Cannot Reach Code Execu... |
remote-code-execution |
|
|
| Wed, 17 Dec 2025 09:57:30 GMT |
The Mother Lode: Hacking with GitHub Dorking |
github-dorking |
|
|
| Wed, 14 Oct 2026 06:11:48 GMT |
I Found an RBAC Authorization Bypass in Wazuh — CVE-2026–7403... |
hackerone, bugbounty-writeup |
|
|
| Tue, 30 Jun 2026 12:11:15 GMT |
El toro de Wall Street ya está en WhiteBIT |
bounty-program |
|
|
| Tue, 06 Oct 2026 09:08:16 GMT |
Introduction to Vulnerability Assessment (VA) |
vapt |
|
|
| Fri, 31 May 2024 13:29:16 GMT |
Map of the worlds best URLs 2025 |
log-poisoning |
|
|
| Fri, 01 Aug 2025 06:17:06 GMT |
15,000 Critical Systems Are Exposed — Thanks to This Outdat... |
censys |
|
|
| Sun, 23 Aug 2026 19:39:11 GMT |
The vulnerability was real. The attack was not. |
vulnerability-disclosure |
|
|
| Sat, 25 Jul 2026 04:56:38 GMT |
Writeup VDP CVE-2026–42031 (CKAN SQLI & Autherization bypass) d... |
vdp |
|
|
| Sun, 06 Sep 2026 18:34:22 GMT |
Exposed Django Debug Mode on a Development Subdomain |
information-disclosure |
|
|
| Wed, 30 Sep 2026 09:01:46 GMT |
The Tiny Project Logic Bug That Unlocked Enterprise |
vulnerability-disclosure |
|
|
| Mon, 28 Sep 2026 12:53:07 GMT |
TryHackMe: IDE— Walkthrough |
rce |
|
|
| Wed, 14 Oct 2026 14:19:56 GMT |
I Passed the PNPT: My Honest Exam Experience, Preparation Strateg... |
penetration-testing, ethical-hacking |
|
|
| Sun, 05 Jul 2026 12:32:24 GMT |
How to Pick a Directory Listing Service That Actually Works |
directory-listing |
|
|
| Thu, 01 Oct 2026 14:33:15 GMT |
Server-Side reCAPTCHA Validation Bypass on /services/request-send... |
bugbounty-writeup |
|
|
| Wed, 14 Oct 2026 13:26:01 GMT |
What Happens When You Spend a Year Trying to Destroy a Man Who Al... |
vulnerability |
|
|
| Sun, 11 Oct 2026 17:33:16 GMT |
A WordPress website is never really finished. |
bugs |
|
|
| Mon, 05 Oct 2026 09:17:12 GMT |
SEARCH SKILLS — TRY HACK ME WALKTHROUGH: |
shodan |
|
|
| Wed, 14 Oct 2026 20:57:15 GMT |
SIM Locked or Carrier Unlocked? What the Difference Means for You... |
security |
|
|
| Sat, 03 Oct 2026 13:33:13 GMT |
CVE Decoded #2: CVE-2026–23646 (OpenProject) |
bugbounty-writeup |
|
|
| Sat, 22 Aug 2026 01:45:40 GMT |
The bug that survived three years of code review |
vulnerability-disclosure |
|
|
| Thu, 17 Sep 2026 17:42:29 GMT |
Nmap Learning Series — Part 3: OS and Service Version Scanning |
cybersecurity-tools |
|
|
| Tue, 11 Nov 2025 16:43:14 GMT |
Beyond Google: Navigating the Hidden Internet with Shodan and Cen... |
censys |
|
|
| Thu, 28 May 2026 07:15:06 GMT |
¡Únete y hazte con uno de los más de 400 premios! |
bounty-program |
|
|
| Wed, 14 Oct 2026 07:46:52 GMT |
Machine Identities Now Outnumber Humans and Nobody’s Watching T... |
api-key |
|
|
| Thu, 03 Sep 2026 05:29:39 GMT |
PortSwigger XSS Labs Walkthrough: Reflected, Stored, DOM & CSP By... |
cross-site-scripting |
|
|
| Wed, 14 Oct 2026 11:35:21 GMT |
Hidden Spy Chip in a Ledger Wallet: How Safe Is Cold Storage? |
cyber-security-awareness |
|
|
| Mon, 03 Aug 2026 20:29:20 GMT |
Sublist3r |
subdomain-enumeration |
|
|
| Wed, 14 Oct 2026 03:09:14 GMT |
Stop Paying for API Keys? The Real Win Is Making LLM Cost an Engi... |
api-key |
|
|
| Sat, 03 Oct 2026 15:20:04 GMT |
AWS IAM Credential Exposure via a CRM Platform’s Custom Automat... |
hackerone |
|
|
| Wed, 14 Oct 2026 12:09:22 GMT |
Your Pentest Is Finished. Can Your SOC Explain What Happened? |
pentesting |
|
|
| Fri, 06 Jun 2025 15:47:21 GMT |
��♂� GitHub Dorking for Bug Bounty: Hackers' Hidden Playg... |
github-dorking |
|
|
| Tue, 21 Apr 2026 15:05:26 GMT |
Web Security Series #17 — Exploiting Local File Inclusion (LFI)... |
file-inclusion |
|
|
| Sun, 21 Jun 2026 00:45:05 GMT |
Atdork |
google-dorking |
|
|
| Tue, 09 Jun 2026 07:00:48 GMT |
Costa Rica Beaches: Which Ones Are Worth the Drive |
directory-listing |
|
|
| Sun, 04 Oct 2026 20:35:37 GMT |
ACTION FI: SOMETHING DIFFERENT |
bounties |
|
|
| Mon, 12 Oct 2026 13:44:57 GMT |
Relay Sign-Up Done: Create a Token and Copy the Base URL |
api-key |
|
|
| Wed, 14 Oct 2026 06:47:07 GMT |
PowerShell Analysis — Keylogger (BTLO) Writeup |
infosec |
|
|
| Wed, 14 Oct 2026 19:47:10 GMT |
The Fall Bug Invasion Isn’t About Dirt. It’s About Your Sunny... |
bugs |
|
|
| Mon, 12 Oct 2026 02:26:14 GMT |
Reflected XSS pada Dua Parameter Berbeda di Portal Pemerintah Kab... |
xss-attack |
|
|
| Tue, 06 Oct 2026 20:14:16 GMT |
House of Cinder: a use-after-free to RCE chain on glibc 2.44 |
rce |
|
|
| Thu, 03 Sep 2026 11:34:27 GMT |
TryHackMe: Lo-Fi Walkthrough |
local-file-inclusion |
|
|
| Wed, 14 Oct 2026 21:11:55 GMT |
My First Blockchain Bug Bounty Investigation: What a Duplicate Re... |
bug-bounty, application-security |
|
|
| Wed, 14 Oct 2026 13:37:54 GMT |
Peeling Back the Layers: Unmasking Hidden Secrets in JavaScript C... |
penetration-testing, web-security |
|
|
| Tue, 13 Oct 2026 10:31:01 GMT |
Evaluating AI-Generated Test Cases: What Happened When I Introduc... |
bugs |
|
|
| Thu, 28 May 2026 16:33:00 GMT |
CONTENT DISCOVERY-TRYHACKME WALKTHROUGH |
google-dorking |
|
|
| Sun, 21 Jun 2026 18:54:02 GMT |
From Hydra to RCE: Breaking Down TryHackMe’s Support Machine |
web-pentest |
|
|
| Sat, 14 Mar 2026 18:06:12 GMT |
Web Security Series #3 — Discovering Credentials Using Cluster ... |
bug-bounty-hunting |
|
|
| Fri, 07 Aug 2026 08:34:38 GMT |
I Gave an Open-Weight Model a Linux Kernel Bug(CVE-2026–64564). |
cyber-sec |
|
|
| Wed, 14 Oct 2026 01:05:02 GMT |
CVSS 10.0 Bricksforge Flaw Under Attack: WordPress Sites Can Be H... |
web-security |
|
|
| Tue, 13 Oct 2026 01:54:15 GMT |
SQL Injection vs. XSS vs. CSRF: 1 Million Users in 20 Hours and a... |
xss-attack |
|
|
| Fri, 11 Sep 2026 10:14:38 GMT |
Learn Cross Site Scripting (XSS) With Me as a Beginner |
cross-site-scripting |
|
|
| Thu, 01 Oct 2026 15:45:13 GMT |
How a Predictable Activity ID Bypassed an Unguessable Invite Link... |
hackerone |
|
|
| Thu, 27 Mar 2025 23:46:11 GMT |
Make Break and Betrayal |
web-pentest |
|
|
| Wed, 23 Sep 2026 07:53:13 GMT |
HauntMart Web Challenge (Easy Difficulty) |
ssrf |
|
|
| Wed, 14 Oct 2026 13:47:45 GMT |
RAM কী, �র কাজ কী �বং পিসির জ... |
information-technology |
|
|
| Tue, 13 Oct 2026 13:34:46 GMT |
How to Build a Web App Security Testing Program That Actually Hol... |
application-security |
|
|
| Mon, 12 Oct 2026 21:41:36 GMT |
Stapler: 1 CTF Writeup — SambaCry ile Root Erişimi / Root Acce... |
cve |
|
|
| Wed, 14 Oct 2026 00:00:42 GMT |
The $2M Fraud That Passed Every Security Check | RelayShield |
infosec |
|
|
| Thu, 08 Oct 2026 20:00:01 GMT |
AI Script Kiddies Broke Bug Bounty Hunting |
bug-bounty-hunter |
|
|
| Sun, 13 Sep 2026 15:01:52 GMT |
My Journey From 0 to 10k$ |
bug-bounty-hunter |
|
|
| Tue, 13 Oct 2026 13:18:12 GMT |
How I Found a Bug Bounty Vulnerability That Let Me Remove Other U... |
application-security |
|
|
| Thu, 20 Aug 2026 09:21:53 GMT |
From Open Ports to Vulnerabilities: My Hands-On Practice with Nma... |
vulnerability-scanning |
|
|
| Sun, 15 Mar 2026 16:45:35 GMT |
Web Security Series #4 — Discovering Unauthorized Resources via... |
bug-bounty-hunting |
|
|
| Mon, 12 Oct 2026 18:00:53 GMT |
Blind XSS Accepted, No Payout: A Bug Bounty Lesson. |
xss-vulnerability |
|
|
| Tue, 13 Oct 2026 11:39:40 GMT |
I’ve Been Learning Bug Bounty for 6 Months. Here’s What Nobod... |
bug-bounty-tips |
|
|
| Sat, 10 Oct 2026 12:51:25 GMT |
TryHackMe | DogCat Walkthrough From LFI To RCE(Escaping Docker C... |
rce |
|
|
| Thu, 14 Aug 2025 10:54:38 GMT |
Unlocking the Hidden Power of Search Engines |
censys |
|
|
| Wed, 14 Oct 2026 17:01:29 GMT |
INVESTIGATION UPDATE: New Testimony and Expanding Cybersecurity A... |
hacking |
|
|
| Sat, 20 Apr 2024 17:20:58 GMT |
TryHackMe — Brute Walkthrough | TheHiker |
log-poisoning |
|
|
| Tue, 15 Sep 2026 04:53:54 GMT |
DOM-Based XSS: A Beginner’s Guide |
cross-site-scripting |
|
|
| Thu, 28 Sep 2023 23:05:39 GMT |
Archangel — TryHackMe |
log-poisoning |
|
|
| Fri, 21 Aug 2026 03:27:08 GMT |
Forgotten CNAME? So Was Your Subdomain | Featurebase as an Under... |
subdomain-takeover |
|
|
| Fri, 26 Jun 2026 06:25:44 GMT |
Costa Rica Canopy Tours: Choosing Experiences That Match Your Com... |
directory-listing |
|
|
| Wed, 14 Oct 2026 17:18:24 GMT |
Someone Hacked the Supermarket Fridges — Europe Discovered Its ... |
hacking |
|
|
| Mon, 28 Sep 2026 00:28:50 GMT |
Cookie NILE CTF |
exploit |
|
|
| Wed, 14 Oct 2026 21:48:30 GMT |
I Tested Three AI Penetration-Testing Approaches. Here’s What A... |
penetration-testing |
|
|
| Tue, 22 Sep 2026 13:43:25 GMT |
The Bool Party You Will Never Forget: A Binary Exploitation Techn... |
exploit |
|
|
| Sat, 12 Sep 2026 16:17:38 GMT |
Broken Email Change Flow leads to Email Verification Bypass |
bugcrowd |
|
|
| Sun, 13 Sep 2026 12:00:56 GMT |
Stored Cross-Site-Scripting(XSS): A Beginner’s Guide |
cross-site-scripting |
|
|
| Sat, 03 Oct 2026 18:41:09 GMT |
I Found the Endpoint, But Missed the Vulnerability: A Recon Mista... |
idor |
|
|
| Tue, 25 Aug 2026 09:49:53 GMT |
B2B Directory Listing Sites: Top 10 for 2026 |
directory-listing |
|
|
| Wed, 14 Oct 2026 21:27:12 GMT |
I found a secret door into an admin panel — and got paid $1350 ... |
bug-bounty, bug-bounty-tips, bugs, bug-bounty-writeup |
|
|
| Tue, 13 Oct 2026 22:15:33 GMT |
CVE-2026–94545 Explained: What Happens When an OG-Image Generat... |
cve |
|
|
| Thu, 23 Jul 2026 17:59:49 GMT |
HTB SpookyPass Writeup |
cyber-sec |
|
|
| Mon, 10 Aug 2026 16:30:32 GMT |
Web Cache Deception vs Web Cache Poisoning: The Attack Paths Most... |
web-cache-poisoning |
|
|
| Fri, 06 Feb 2026 06:33:08 GMT |
5 Ways to Bypass Email Verification Without Using Any Tool |
bug-bounty-program |
|
|
| Tue, 16 Jun 2026 11:22:14 GMT |
Review AtDork: Tool Dorking Python Terbaik 2026? |
dorking |
|
|
| Sat, 19 Sep 2026 19:06:37 GMT |
Google Dorking for Bug Hunters: Real-World Case Studies |
google-dork |
|
|
| Thu, 13 Mar 2025 18:09:56 GMT |
How I Found Sensitive Information using Github Dorks in Bug Bount... |
github-dorking |
|
|
| Thu, 18 Jun 2026 11:52:47 GMT |
¿Usas Intercambio? |
bounty-program |
|
|
| Wed, 14 Oct 2026 10:41:59 GMT |
France’s Supermarket Refrigeration Cyberattack: A Technical Inv... |
hacking |
|
|
| Mon, 27 Jul 2026 19:35:36 GMT |
Brew Bank Revenge — Official Writeup | EYCC CTF |
lfi |
|
|
| Sun, 04 Oct 2026 23:05:46 GMT |
Web Cache Poisoning: Understanding, Detecting, and Exploiting Cac... |
web-cache-poisoning |
|
|
| Sat, 12 Sep 2026 13:17:40 GMT |
Understanding CVE-2026–86426: The Critical Type Confusion Flaw ... |
remote-code-execution |
|
|
| Wed, 14 Oct 2026 13:18:54 GMT |
Types of Hackers: 10 Hacker Types You Should Know in Cybersecurit... |
information-security, ethical-hacking |
|
|
| Wed, 15 Jul 2026 11:30:22 GMT |
TryHackMe | Google Dorking |
google-dorking |
|
|
| Tue, 06 Oct 2026 13:54:44 GMT |
CITRIX 0-DAY EXPLOITS: CVE-2026–88771 & CVE-2026–88772 IN THE... |
exploit |
|
|
| Thu, 11 Jun 2026 05:26:16 GMT |
START HERE, MANIFESTO |
dorks |
|
|
| Fri, 02 Oct 2026 13:36:07 GMT |
Shodan.io: The Search Engine for Internet-Connected Devices |
shodan |
|
|
| Wed, 09 Sep 2026 09:11:00 GMT |
The Ultimate 2026 Shodan Cheat Sheet Guide |
shodan |
|
|
| Sat, 26 Sep 2026 17:31:02 GMT |
I Took Over the Infrastructure. The CDN Still Said No. |
subdomain-takeover |
|
|
| Wed, 30 Sep 2026 13:06:58 GMT |
Road to First Bug Day 0/90 |
bug-bounty-hunter |
|
|
| Fri, 09 Oct 2026 11:31:14 GMT |
Google suspend son bug bounty open source submergé par l’IA |
hackerone |
|
|
| Wed, 29 Jul 2026 06:41:51 GMT |
What is Web Cache Poisoning? |
web-cache-poisoning |
|
|
| Wed, 14 Oct 2026 15:01:56 GMT |
The Causes and Impacts of the Controversy Over the Chinese Govern... |
vulnerability |
|
|
| Thu, 08 Oct 2026 13:39:30 GMT |
La Metodologia dietro la Remote Code Execution (RCE) |
rce |
|
|
| Tue, 15 Sep 2026 00:14:38 GMT |
Web Cache Deception via URL Parsing Discrepancy — PII Disclosur... |
web-cache-poisoning |
|
|
| Wed, 14 Oct 2026 11:38:16 GMT |
Google Awards $250,000 for an AI-Assisted Chrome Exploit: A Turni... |
application-security |
|
|
| Thu, 08 Oct 2026 04:04:43 GMT |
How We Made File Uploads Resume Instead of Restart |
file-upload |
|
|
| Mon, 05 Oct 2026 19:30:13 GMT |
Easy Logic Bugs: How I Bypassed Two “Unbypassable� Checks in ... |
security-research |
|
|
| Mon, 21 Sep 2026 09:48:33 GMT |
[25€ Broken Social Link] Due to outdated footer |
bug-bounty-hunter |
|
|
| Tue, 13 Oct 2026 18:02:39 GMT |
Cloud Storage for Videos: Keep Your Footage Safe |
xss-attack |
|
|
| Tue, 29 Sep 2026 17:06:32 GMT |
How I Bypassed an OTP Verification Limit by Chaining Multiple Log... |
bugcrowd |
|
|
| Wed, 20 May 2026 20:47:25 GMT |
FINDING INFORMATION QUICKLY AND ACCURATELY WITH GOOGLE DORK |
github-dorking |
|
|
| Fri, 10 Nov 2023 03:38:01 GMT |
Apache error.log advanced Log poisoning RCE |
log-poisoning |
|
|
| Wed, 14 Oct 2026 00:41:31 GMT |
What Is Shodan And How Does It Work? |
shodan |
|
|
| Wed, 14 Oct 2026 21:50:04 GMT |
When Keycloak’s Event Store Runs on Defaults Without `enabled_e... |
security |
|
|
| Wed, 14 Oct 2026 12:14:46 GMT |
Before You Refer a Client for a Pentest, Collect These Details |
pentesting |
|
|
| Tue, 06 Oct 2026 12:37:52 GMT |
VAPT Certification in India for SaaS Companies: Close Security Ga... |
vapt |
|
|
| Mon, 07 Sep 2026 10:29:47 GMT |
The 5-Phase Pentesting Model, Explained Simply |
pentest |
|
|
| Fri, 19 Sep 2025 07:40:16 GMT |
How I Tracked Our Clients’ Device Versions Without Direct Repor... |
zoomeye |
|
|
| Sun, 20 Sep 2026 16:10:55 GMT |
How I Found an Undocumented GraphQL Endpoint Leaking Home Address... |
bounties |
|
|
| Wed, 14 Oct 2026 15:08:21 GMT |
From Frida to Objection: Automating the SSL Pinning Bypass |
pentesting |
|
|
| Mon, 24 Aug 2026 11:13:05 GMT |
Fools guide to UAT-10147 |
pentest |
|
|
| Wed, 12 Feb 2025 22:46:35 GMT |
https://www.express.co.uk/life-style/property/2012927/cleaning-ch... |
web-pentest |
|
|
| Tue, 13 Oct 2026 21:46:10 GMT |
Gitea Guarded Three Doors and Forgot the Fourth |
ssrf |
|
|
| Tue, 22 Apr 2025 10:38:20 GMT |
Trump’s Tariffs Cut Out Censys — ZoomEye Steps In Strong! |
zoomeye |
|
|
| Sat, 12 Sep 2026 15:56:01 GMT |
Why “Claimable� Doesn’t Always Mean “Exploitable�: A Su... |
subdomain-takeover |
|
|
| Thu, 08 Oct 2026 13:34:27 GMT |
How One Student Earned $1,030 From an Adobe Bug: A Bugitrix Case ... |
bug-bounty-hunter |
|
|
| Mon, 31 Aug 2026 12:33:36 GMT |
A Senior Pentester’ Approach to IDOR and Authorization Testing |
pentest |
|
|
| Tue, 10 Feb 2026 23:04:46 GMT |
Effective Dorking Tools |
dorking |
|
|
| Wed, 14 Oct 2026 14:48:24 GMT |
Signal Acquired: Cybersecurity Weekly Brief |
infosec |
|
|
| Fri, 24 Jan 2025 09:34:52 GMT |
A new Holistic temple opening InLeeds |
web-pentest |
|
|
| Sun, 19 Jul 2026 19:30:09 GMT |
Login Security Testing Checklist |
bug-bounty-hunting |
|
|
| Mon, 16 Mar 2026 14:32:42 GMT |
Web Security Series #5 — Exploiting Broken Access Control via T... |
bug-bounty-hunting |
|
|
| Fri, 02 Oct 2026 17:23:17 GMT |
How to Validate Uploaded Invoices Against Business Rules in C# |
file-upload |
|
|
| Wed, 14 Oct 2026 13:03:03 GMT |
When Cybercriminals Turn Your AI Agent Against You |
hacking |
|
|
| Wed, 14 Oct 2026 16:54:34 GMT |
Cybersecurity Isn’t Just an IT Problem. It’s a Trust Problem. |
information-technology, information-security |
|
|
| Wed, 30 Sep 2026 11:34:26 GMT |
XSS Gym Levels 1–20: A Context-Based Approach to Cross-Site Scr... |
cross-site-scripting |
|
|
| Wed, 14 Oct 2026 20:52:42 GMT |
Someone Hid a Bug in OpenAI’s Boardroom. OpenAI Used Its Own AI... |
security |
|
|
| Tue, 01 Sep 2026 20:11:03 GMT |
From Bug to Schema: Exploring Error-Based SQL Injection on an Aut... |
vulnerability-disclosure |
|
|
| Tue, 13 Oct 2026 14:17:32 GMT |
KPMG CTF 2026 Web Challenges: The Dragon Warrior Solution |
bugbounty-writeup |
|
|
| Wed, 14 Oct 2026 19:41:01 GMT |
He Sneezed Mozzarella on My Laptop. That’s When It Was Over. |
vulnerability |
|
|
| Wed, 07 Oct 2026 12:12:59 GMT |
TryHack3M: Bricks Heist |
remote-code-execution |
|
|
| Wed, 30 Sep 2026 11:52:45 GMT |
Garak LLM Scanner: what it caught and what it couldn’t see |
vulnerability-scanning |
|
|
| Wed, 14 Oct 2026 21:21:15 GMT |
RECON Part 1: Finding Subdomains — How a Hardcoded Password Got... |
bug-bounty, bug-bounty-tips, bug-bounty-writeup |
|
|
| Wed, 14 Oct 2026 13:42:46 GMT |
June Bug Spiritual Meaning: 9 Powerful Signs, Symbolism & Hidden ... |
bug-bounty-tips, bugs |
|
|
| Tue, 13 Oct 2026 22:48:32 GMT |
Guidelines: Top Platforms to Find a Professional Hacker > Smatcho... |
bugcrowd |
|
|
| Sun, 26 Jan 2025 19:08:11 GMT |
Matrix strike’s back against honesty from a power stance |
web-pentest |
|
|
| Tue, 02 Jun 2026 19:48:50 GMT |
From False Positive to Hall of Fame: Exploiting Web Cache Poisoni... |
web-cache-poisoning |
|
|
| Wed, 14 Oct 2026 16:00:11 GMT |
India Data Centre Policy 2026: AI and Power Demand |
information-technology |
|
|
| Tue, 13 Oct 2026 17:06:05 GMT |
A Sentry error log can tell your coding agent what to run |
application-security |
|
|
| Wed, 12 Aug 2026 03:16:00 GMT |
Three CVEs in Activepieces: The Sandbox Was Real. The Code Just D... |
vulnerability-disclosure |
|
|
| Wed, 09 Sep 2026 23:33:05 GMT |
CVE-2026–69730: Windows DNS Sunucusunda Kritik “Sıfır Tıkl... |
remote-code-execution |
|
|
| Mon, 18 May 2026 07:01:05 GMT |
InterLink Migration Vote Begins | Active Bounty Season 3 |
bounty-program |
|
|
| Sun, 20 Sep 2026 03:00:11 GMT |
OAuth vs API Keys: Which Is Safer for Data Integrations? |
api-key |
|
|
| Thu, 09 Jul 2026 23:38:38 GMT |
AtDork 1.3.9.6? 180,000 Dorks free open source |
google-dork, dorks |
|
|
| Wed, 14 Oct 2026 09:25:20 GMT |
We Inspected 50 High-Growth SaaS Apps. 80% Had Silent Bugs Direct... |
bugs |
|
|
| Tue, 18 Aug 2026 09:49:57 GMT |
The Hidden Internet in Plain Sight: 9 Google Operators That Fuel ... |
google-dork |
|
|
| Sat, 08 Aug 2026 12:57:41 GMT |
Bir XSS Turu: Temelden Az Bilinene (9 farklı senaryo) |
xss-bypass |
|
|
| Wed, 14 Oct 2026 11:26:56 GMT |
North Korea Stole $6.75 Billion in Crypto. Nobody Picked a Lock. |
hacking |
|
|
| Mon, 12 Oct 2026 18:59:25 GMT |
SQL injection vulnerability in WHERE clause allowing retrieval of... |
bug-bounty-writeup |
|
|
| Mon, 05 Oct 2026 05:55:49 GMT |
Reflected XSS di Portal Data IKM Pemerintah [REDACTED] via Para... |
xss-vulnerability |
|
|
| Fri, 09 Oct 2026 21:51:45 GMT |
Passive Reconnaissance on Google.com Using Shodan |
shodan |
|
|
| Sun, 13 Sep 2026 12:40:10 GMT |
Regex for Hackers: Using Regex for Recon & Broken Validation |
recon |
|
|
| Sun, 30 Aug 2026 15:25:58 GMT |
The Subdomain Recon Chain: subfinder → httpx → dnsx |
recon |
|
|
| Tue, 13 Oct 2026 22:53:30 GMT |
MIME-Type Confusion with S3 Bucket Content-Type Override lead to ... |
xss-attack |
|
|
| Wed, 14 Oct 2026 22:11:19 GMT |
Engenharia de Defesa: Mitigando Ameaças de IP Spoofing e ARP Poi... |
information-security |
|
|
| Wed, 14 Oct 2026 14:46:17 GMT |
Attackers Love Your YAML: Static Kubernetes Security Analysis for... |
information-security |
|
|
| Sun, 06 Sep 2026 01:01:34 GMT |
Cross-Site Scripting (XSS) |
cross-site-scripting |
|
|
| Sat, 19 Sep 2026 01:21:26 GMT |
What I learned From Managing Bug Bounty Program |
bug-bounty-program |
|
|
| Tue, 18 Nov 2025 08:33:41 GMT |
A Chain of Vulnerabilities Leading to Critical Information Disclo... |
bug-bounty-program |
|
|
| Sun, 11 Oct 2026 23:13:57 GMT |
HTB: Remote |
rce |
|
|
| Tue, 22 Sep 2026 10:28:25 GMT |
Handle With Care — SkillBit CTF Writeup |
lfi |
|
|
| Mon, 12 Oct 2026 12:51:01 GMT |
Inaugural Notre Dame InsectFest celebrates insect research, biodi... |
bugs |
|
|
| Sun, 11 Oct 2026 10:55:06 GMT |
Playwright Tutorial | Alerts, Popups, iFrames, File Upload & Dow... |
file-upload |
|
|
| Sat, 03 Oct 2026 17:27:23 GMT |
Attacking Enterprise Networks (HTB) #1 Reconnaissance |
subdomain-enumeration |
|
|
| Tue, 13 Oct 2026 09:17:21 GMT |
PCI DSS 4.0.1: Key Security Requirements Businesses Should Unders... |
vapt |
|
|
| Tue, 13 Oct 2026 19:57:33 GMT |
Lab: Reflected XSS into HTML Context with Most Tags and Attribute... |
xss-attack, xss-vulnerability |
|
|
| Thu, 03 Sep 2026 06:34:00 GMT |
WebDecode — picoCTF Write-up | Finding and Decoding a Hidden F... |
information-disclosure |
|
|
| Wed, 05 Aug 2026 14:04:53 GMT |
Overheard at Breakfast (THM) Tryhackme Walkthrough Hacker Holiday... |
information-disclosure |
|
|
| Tue, 24 Mar 2026 17:48:00 GMT |
The Ultimate Bug Bounty Course: From Zero to Advanced Hacker 1 |
bug-bounty-hunting |
|
|
| Sat, 26 Sep 2026 09:03:27 GMT |
Crashing a Webhook Endpoint by Disguising an IP Address — $100 ... |
ssrf |
|
|
| Wed, 30 Sep 2026 02:17:01 GMT |
OWASP ZAP REPORT WITH ADVANCED FILTERING BY TAGS AND SEVERITY |
pentest |
|
|
| Fri, 25 Sep 2026 06:18:37 GMT |
Stored Cross-Site Scripting (XSS) Cookie Theft PoC |
xss-vulnerability |
|
|
| Tue, 13 Oct 2026 18:14:07 GMT |
Como eu uso IA para segurança ofensiva e o quanto já me ajudou. |
pentesting |
|
|
| Wed, 22 Jul 2026 19:19:21 GMT |
Back From Vacation & Launching Open Beta: Help Us Test NextBlock ... |
bounty-program |
|
|
| Wed, 14 Oct 2026 09:51:01 GMT |
Survivorship bias is quietly wrecking how you think about breache... |
infosec |
|
|
| Fri, 09 Oct 2026 20:23:40 GMT |
Reflected XSS: Understanding the Attack from “alert(1)� to a ... |
xss-attack |
|
|
| Wed, 30 Sep 2026 11:04:54 GMT |
When Deleting the Default Workspace Made the Entire Account Unusa... |
bugcrowd |
|
|
| Sat, 26 Sep 2026 20:41:46 GMT |
Finding Hidden Bug Bounty Programs Outside HackerOne |
bug-bounty-program |
|
|
| Wed, 14 Oct 2026 21:15:16 GMT |
Four QA Servers, One AWX Workflow, and the Systemd Dependencies I... |
security |
|
|
| Wed, 14 Oct 2026 10:09:43 GMT |
Phishing Analysis Fundamentals: Email Delivery, Header Analysis, ... |
infosec |
|
|
| Wed, 14 Oct 2026 01:07:39 GMT |
Unmasking Infostealers: Hunting Browser Session Cookie Theft with... |
infosec |
|
|
| Tue, 03 Feb 2026 17:12:47 GMT |
My First Week: 3 Business Logic Bugs in Major E-Commerce |
bug-bounty-program |
|
|
| Wed, 23 Sep 2026 19:47:58 GMT |
Stop Writing Regexes for IP Security: SSRF Protection Is a Networ... |
ssrf |
|
|
| Mon, 08 Jun 2026 09:48:02 GMT |
XSS WAF Bypass: The Ultimate Deep Dive |
xss-bypass |
|
|
| Wed, 14 Oct 2026 18:11:55 GMT |
Adobe Security Updates and Vulnerability Patches |
vulnerability |
|
|
| Tue, 06 Oct 2026 18:31:01 GMT |
Top 20 curl Commands Every Hacker Should Know. |
cybersecurity-tools |
|
|
| Thu, 03 Sep 2026 06:34:13 GMT |
Bypassing WhatsApp Web’s Single-Session Restriction Using an In... |
bug-bounty-hunting |
|
|
| Mon, 05 Oct 2026 09:11:35 GMT |
From “Just an Error� to Full Read/Write Access on Someone Els... |
idor |
|
|
| Tue, 13 Oct 2026 08:31:09 GMT |
Des pirates chauffent des réfrigérateurs de supermarchés à 50... |
shodan |
|
|
| Sat, 22 Aug 2026 16:26:41 GMT |
Elementor Pro CVE-2026–32475 — Critical Unauthenticated RCE V... |
vulnerability-disclosure |
|
|
| Sat, 18 Jul 2026 19:00:12 GMT |
XSS Bypass — The Hackers Labs |
xss-bypass |
|
|
| Tue, 21 Jul 2026 19:02:10 GMT |
La gauche radicale face au piège de l’essentialisation des jui... |
lfi |
|
|
| Sat, 10 Oct 2026 08:02:31 GMT |
Your Backend Doesn’t Have to Carry Every File to S3 |
file-upload |
|
|
| Mon, 17 Aug 2026 10:48:46 GMT |
Google Dorking, Search Techniques, and File Formats |
google-dorking |
|
|
| Mon, 28 Sep 2026 11:43:26 GMT |
Citrix Zero-Day: How Vulnerable Is the Netherlands’ Digital Inf... |
rce |
|
|
| Sat, 26 Sep 2026 20:29:07 GMT |
Comment2Shell: WordPress’te Yorumlardan Sistemi Ele Geçirmeye ... |
remote-code-execution, xss-vulnerability |
|
|
| Sat, 03 Oct 2026 19:07:33 GMT |
PhishGuard v1.2.0: Building an Explainable Phishing Detection Too... |
cybersecurity-tools |
|
|
| Wed, 23 Sep 2026 04:12:24 GMT |
Báo cáo Pentest chất lượng: Ranh giới giữa tuân thủ... |
pentest |
|
|
| Fri, 25 Sep 2026 18:26:19 GMT |
TinyXss | CatReloaded Finals Web Challenge |
xss-vulnerability |
|
|
| Fri, 09 Oct 2026 15:20:32 GMT |
Shodan —The Search Engine for Internet-Connected Devices (With ... |
shodan |
|
|
| Wed, 14 Oct 2026 13:01:04 GMT |
The Secret Is in the Staying |
vulnerability |
|
|
| Tue, 29 Sep 2026 18:31:01 GMT |
curl for Hackers: A Practical Guide to HTTP, APIs & Web Testing |
cybersecurity-tools |
|
|
| Tue, 05 Dec 2023 07:54:40 GMT |
LFI via SMTP log poisoning |
log-poisoning |
|
|
| Tue, 15 Sep 2026 12:01:02 GMT |
I Built a Recon Pipeline That Maps a Target Before I Touch It |
recon |
|
|
| Wed, 14 Oct 2026 12:12:53 GMT |
Choosing a VAPT Partner? Your Industry Changes What You Need to T... |
application-security, vapt |
|
|
| Wed, 14 Oct 2026 09:26:01 GMT |
$18,000 for a Serialized String in a Cookie: PHP Object Injection... |
bug-bounty, hacking, bug-bounty-tips |
|
|
| Mon, 22 Jun 2026 06:51:54 GMT |
Find exposed sensitive data in AWS, Google Cloud, and other platf... |
dorks |
|
|
| Sun, 14 Dec 2025 06:37:06 GMT |
My Bug Bounty Diary |
subdomain-enumeration |
|
|
| Mon, 11 Dec 2023 18:17:01 GMT |
Exploiting a Log Poisoning. |
log-poisoning |
|
|
| Wed, 14 Oct 2026 11:35:16 GMT |
How I found a Zero-Click Account Tack over via password rest link |
bug-bounty, bug-bounty-tips, bug-bounty-writeup |
|
|
| Fri, 11 Sep 2026 14:01:03 GMT |
Getting Started with OSINT: Google Dorking Part 2 More Useful Sea... |
google-dork |
|
|
| Tue, 13 Oct 2026 13:31:01 GMT |
Beyond Reflection: Eliminating False Positives in Cross-Site Scri... |
application-security |
|
|
| Wed, 14 Oct 2026 12:57:32 GMT |
The Hidden Data in Every Photo (My First OSINT Lesson) |
infosec |
|
|
| Mon, 27 Jan 2025 16:51:28 GMT |
The man who suffered 11 years in hell for freedom has now been fr... |
web-pentest |
|
|
| Tue, 29 Sep 2026 10:37:26 GMT |
Practical SQL Injection Testing with sqlmap |
cybersecurity-tools |
|
|
| Wed, 23 Jul 2025 15:15:01 GMT |
TryHackMe Include walkthrough: SSRF, log poisoning & LFI2RCE, wit... |
log-poisoning |
|
|
| Sat, 15 Aug 2026 01:26:32 GMT |
The 2026 Jeep Recon: A Jeep that lets you relive the Top Gear Bot... |
recon |
|
|
| Sun, 27 Sep 2026 14:50:28 GMT |
Your AI Accounts Are Now a Target: What the Latest Threat Researc... |
api-key |
|
|
| Wed, 14 Oct 2026 17:56:10 GMT |
From Playing Games to Breaking Systems: My Journey Through Practi... |
hacking |
|
|
| Fri, 09 Oct 2026 06:48:16 GMT |
Reconnaissance vs. Exploitation: Understanding Two Critical Phase... |
exploit |
|
|
| Sun, 21 Sep 2025 07:02:30 GMT |
Affordable but Vulnerable? The Dark Side of CMORE HMI |
censys |
|
|
| Wed, 29 Jul 2026 12:30:32 GMT |
Is Google Dorking Legal? Understanding the Ethical and Legal Aspe... |
google-dorking, google-dork |
|
|
| Wed, 09 Sep 2026 05:19:56 GMT |
What Is Continuous Security Validation?A Complete Guide |
vulnerability-scanning |
|
|
| Mon, 03 Aug 2026 09:22:06 GMT |
Server-2: Vulnerable OnlyPhone— VulnerabilityWeb Walkthrough (4... |
directory-listing |
|
|
| Wed, 26 Aug 2026 11:12:57 GMT |
picoCTF Medium — No FA Writeup |
web-pentest |
|
|
| Wed, 14 Oct 2026 07:01:04 GMT |
From One Lock to a Full Security Squad: The Real Story of Cyber D... |
cyber-security-awareness |
|
|
| Mon, 24 Aug 2026 19:17:26 GMT |
Metasploit Scanning and Exploitation: From Reconnaissance to Expl... |
vulnerability-scanning |
|
|
| Wed, 07 Oct 2026 06:01:01 GMT |
How I Found an IDOR Bug That Exposed Other Users’ Account Infor... |
idor |
|
|
| Mon, 06 Jul 2026 11:47:49 GMT |
UK Business Directory: Strategic Visibility for Local Market Succ... |
directory-listing |
|
|
| Wed, 30 Sep 2026 05:57:37 GMT |
Step-by-Step Guide to Finding a Subdomain Takeover |
subdomain-takeover |
|
|
| Wed, 14 Oct 2026 06:17:10 GMT |
Web Application Scanning: How to Match the Tool to Your Organizat... |
application-security |
|
|
| Fri, 02 Oct 2026 13:06:08 GMT |
$$$: How a Simple IDOR Turned Into a Full Organization Takeover |
idor |
|
|
| Mon, 12 Oct 2026 12:35:32 GMT |
TryHackMe:Vulnversity |
file-upload |
|
|
| Fri, 09 Oct 2026 10:50:28 GMT |
Anthropic’s OSS Scanner: What AI-Powered Open-Source Security S... |
vulnerability-scanning |
|
|
| Wed, 07 Oct 2026 09:35:26 GMT |
NO AI, How I Exposed a Database Without Injecting Anything |
hackerone, bugcrowd |
|
|
| Tue, 06 Oct 2026 08:47:52 GMT |
Bug Bounty Hunting: Complete Roadmap, Tools, Commands & Practical... |
bugbounty-writeup |
|
|
| Sun, 13 Sep 2026 00:59:52 GMT |
Shodan en CLI |
shodan |
|
|
| Fri, 25 Sep 2026 16:12:58 GMT |
Nmap Learning Series — Part 7: FIN, NULL & Xmas Scans |
recon |
|
|
| Wed, 14 Oct 2026 13:09:49 GMT |
A one-tap token drain in Unstoppable Wallet, and the $20 bug boun... |
bug-bounty |
|
|
| Wed, 14 Oct 2026 09:00:22 GMT |
Profiles (THM) Tryhackme Walkthrough |
hacking |
|
|
| Sat, 12 Sep 2026 20:51:22 GMT |
One Symlink to Root — A Full Walkthrough: From Chat Messages to... |
bugcrowd |
|
|
| Mon, 05 Oct 2026 12:13:28 GMT |
One GraphQL Mutation Let Me Change Another User’s Alert Setting... |
idor |
|
|
| Wed, 14 Oct 2026 13:18:36 GMT |
Agent Sudo Walkthrough | TryHackMe |
penetration-testing, ethical-hacking |
|
|
| Wed, 14 Oct 2026 11:38:19 GMT |
When a Cyberattack Makes Refrigerators Overheat: The Growing Risk... |
cyber-security-awareness |
|
|
| Wed, 14 Oct 2026 14:29:39 GMT |
Mungkin Memang Bukan Jalannya(?) |
vdp |
|
|
| Sat, 22 Aug 2026 17:14:56 GMT |
What the Internet Sees |
censys |
|
|
| Wed, 14 Oct 2026 20:23:57 GMT |
Why the Forward-Deployed IT Security Model Beats Traditional MSPs |
security |
|
|
| Wed, 30 Sep 2026 15:26:01 GMT |
The Perfect Phishing ⚔� |
hackerone, bugcrowd |
|
|
| Tue, 13 Oct 2026 14:12:18 GMT |
Password Login vs Password Reset: Which One Is the Real Authentic... |
web-security |
|
|
| Tue, 13 Oct 2026 09:21:01 GMT |
$11,500 for a Payload That Waited: Second-Order SQL Injection in ... |
bug-bounty-tips, bug-bounty-writeup |
|
|
| Sat, 19 Sep 2026 20:48:50 GMT |
I Read The Policies So You Don’t Have To; Bugcrowd (Vulnerabili... |
bugcrowd |
|
|
| Tue, 18 Nov 2025 13:26:47 GMT |
GitHub Dorking: The Hunter’s Guide to Finding Secrets in Public... |
github-dorking |
|
|
| Fri, 09 Oct 2026 13:58:07 GMT |
UUIDs vs Sequential IDs: Which One Actually Stops IDOR? |
idor |
|
|
| Mon, 31 Aug 2026 11:57:29 GMT |
Why Is an API Key Not the Same as Delegated Authority for an AI A... |
bounties |
|
|
| Wed, 01 Jul 2026 11:02:50 GMT |
Bounty Hacker |
bounties |
|
|
| Wed, 14 Oct 2026 16:05:28 GMT |
506 When Structural Manipulation Is Mistaken for Scientific Tra... |
information-technology |
|
|
| Wed, 14 Oct 2026 13:43:07 GMT |
Breaking Point: How Browser Breakpoints Can Unmask Encryption and... |
penetration-testing, web-security |
|
|
| Sat, 26 Sep 2026 12:00:26 GMT |
Can You Exploit A Stack Canary? Most Programmers Say No. I Did. H... |
exploit |
|
|
| Thu, 17 Sep 2026 14:14:38 GMT |
XSS Finally Explained in a Way That Made Sense to Me |
cross-site-scripting |
|
|
| Sun, 26 Jul 2026 17:59:41 GMT |
Recruit — THM Writeup |
local-file-inclusion |
|
|
| Sat, 02 Aug 2025 14:15:23 GMT |
The Silent Risk in Your ICS: Why S7 Protocol Needs Security Atten... |
censys |
|
|
| Fri, 04 Sep 2026 02:36:00 GMT |
Stored Cross-User XSS via Double-Decode Sanitizer Bypass in React... |
xss-bypass |
|
|
| Mon, 25 May 2026 14:19:37 GMT |
Look at this, we created this |
bounties |
|
|
| Sun, 16 Aug 2026 16:47:34 GMT |
Subdomain Takeover: A Real Bug I Found� |
subdomain-takeover |
|
|
| Wed, 14 Oct 2026 05:01:27 GMT |
Irish-Name-Repo 1 : CTF Write-up | SQL Injection Authentication ... |
web-security |
|
|
| Wed, 14 Oct 2026 16:38:06 GMT |
How to Choose the Right IT Recruitment Agency in India for Your B... |
information-technology |
|
|
| Sat, 01 Aug 2026 13:18:29 GMT |
Incident Analysis & Response: Check Point Security Gateway CVE-20... |
lfi |
|
|
| Fri, 09 Oct 2026 18:44:58 GMT |
The Art of the Completion Frame: Extracting the AI Training Engin... |
security-research |
|
|
| Fri, 25 Sep 2026 10:04:49 GMT |
Basics of Subdomain Takeover |
subdomain-takeover |
|
|
| Sun, 05 Jul 2026 11:31:00 GMT |
Google Dorking for Bug Hunters |
google-dork |
|
|
| Tue, 23 Jun 2026 14:32:52 GMT |
Authentication Bypass & Information Disclosure in a Fortune 500 C... |
vdp |
|
|
| Mon, 31 Aug 2026 16:29:06 GMT |
File Inclusion Vulnerability: How a Simple File Request Can Beco... |
lfi |
|
|
| Wed, 14 Oct 2026 10:50:02 GMT |
The Hacker’s Cheat Sheet: OWASP Top 10.(2026) |
web-security |
|
|
| Wed, 23 Sep 2026 13:29:31 GMT |
The Vulnerability Disappeared. Was It Actually Fixed? |
vulnerability-scanning |
|
|
| Sun, 20 Sep 2026 07:17:19 GMT |
Grep for Hackers: The One Command-Line Tool You’ll Use More Tha... |
cybersecurity-tools |
|
|
| Mon, 21 Sep 2026 03:01:06 GMT |
Tần suất Pentest tối ưu: Bà i toán chiến lược giữa... |
pentest |
|
|
| Sun, 13 Sep 2026 17:41:55 GMT |
The Deal Is Broken: What Bugcrowd’s Triage Machine Actually Sel... |
bugcrowd, vulnerability-disclosure |
|
|
| Wed, 14 Oct 2026 19:46:01 GMT |
Third-Party Cybersecurity Risk: How Vendor Security and Supply Ch... |
security |
|
|
| Wed, 14 Oct 2026 07:42:04 GMT |
Pickle Rick Walkthrough | TryHackMe |
pentesting |
|
|
| Wed, 14 Oct 2026 13:11:49 GMT |
What Does a Cyber Security Audit Actually Involve? A First-Timerâ... |
information-security |
|
|
| Tue, 18 Nov 2025 18:12:40 GMT |
Dork Labs Awarded AWS Activate Startup Grant |
dorks |
|
|
| Tue, 11 Aug 2026 08:57:49 GMT |
DEV DIARIES — TRY HACK ME WALKTHROUGH: |
subdomain-enumeration |
|
|
| Tue, 17 Mar 2026 09:18:53 GMT |
Web Security Series #6 — Exploiting SQL Injection to Extract Se... |
bug-bounty-hunting |
|
|
| Sun, 20 Sep 2026 06:34:49 GMT |
The Attack Chain Is the Deliverable, So Why Do Most Red Team Repo... |
pentest |
|
|
| Wed, 14 Oct 2026 21:35:26 GMT |
The Golden Dome Is Needed — But Not Like This |
security |
|
|
| Fri, 07 Aug 2026 09:37:42 GMT |
Are We Missing the #Ai Security Warning Signs? |
cyber-sec |
|
|
| Sat, 26 Sep 2026 16:59:07 GMT |
Security Research |
security-research |
|
|
| Tue, 13 Oct 2026 16:00:26 GMT |
CVE Decoded #4: CVE-2026–87902 (WordPress) |
cve |
|
|
| Wed, 16 Jul 2025 12:07:42 GMT |
Hackers Love This 1979 Protocol (Because It Can’t Defend Itself... |
censys |
|
|
| Sat, 09 May 2026 02:26:22 GMT |
How I Discovered a Reflected XSS Vulnerability on a Major German ... |
xss-bypass |
|
|
| Mon, 05 Oct 2026 12:04:28 GMT |
Bypassing Bad-Word Filters with Unicode Homoglyphs |
bugbounty-writeup |
|
|
| Wed, 07 Oct 2026 08:50:01 GMT |
How I Discovered Blind SSRF in GitLab Leading to Localhost Access... |
hackerone |
|
|
| Thu, 07 May 2026 06:41:01 GMT |
Github Dorking |
dorking, github-dorking |
|
|
| Fri, 25 Sep 2026 07:52:39 GMT |
ELTE Offsec Task 2: Scramble |
remote-code-execution |
|
|
| Fri, 18 Sep 2026 12:48:09 GMT |
How I Found a Critical Jenkins Vulnerability in 10 Minutes and Ea... |
remote-code-execution |
|
|
| Wed, 18 Mar 2026 10:03:26 GMT |
Web Security Series #7 — Exploiting Blind SQL Injection via Ses... |
bug-bounty-hunting |
|
|
| Sun, 20 Sep 2026 09:32:10 GMT |
SSRF: The Complete Interview-Ready Breakdown (and Why the Standar... |
ssrf |
|
|
| Wed, 14 Oct 2026 15:31:49 GMT |
I’m a Beginner Developer, and I’m Learning to Build Real Thin... |
information-technology |
|
|
| Tue, 13 Oct 2026 19:34:29 GMT |
Bir Hacker Gibi Düşünmek — #10 |
xss-attack, xss-vulnerability |
|
|
| Thu, 01 Oct 2026 15:17:28 GMT |
How Changing a POST Request to GET Exposed Users’ PII and Earne... |
hackerone |
|
|
| Wed, 30 Sep 2026 08:50:40 GMT |
CVE-2022–1471: Achieving RCE on Android with SnakeYAML via Cust... |
rce |
|
|
| Tue, 01 Sep 2026 19:13:24 GMT |
pixi on UBI-micro: A Safer, Smaller Multi-Stage Container Build |
vulnerability-scanning |
|
|
| Wed, 16 Sep 2026 04:29:17 GMT |
​Stop sharing your profits with middlemen! |
directory-listing |
|
|
| Wed, 14 Oct 2026 17:53:06 GMT |
PentAGI: The Self-Hosted AI Team That Hacks Your Application Befo... |
penetration-testing |
|
|
