Category: Mix
The Story [EDIT 26/04/22] – I added a note on my personal conclusion about Amass with a note from a…
Gareth Heyes | 13 March 2023 at 15:00 UTC We recently published some research on server-side prototype pollution where we…
tldr; A Private Bug Bounty Program had a globally readable .htpasswd file. I cracked the DES hash, got access to…
Open Source Hacking Lab | Guide on File Inclusion Vulnerability and Path Traversal Attack in PHP Source link
Does Cybersecurity Require Programming? Source link
UMBC Cyberdawgs CTF: The Hacker One Source link
Bypassing a WAF by Finding the Origin IP Source link
Attacking Language Server JSON RPC Source link
It has become a tradition that I publish a review at the end of each year. Unlike previous years I…
Hacking CI/CD (Basic Pipeline Poisoning) Source link
ToolTime – Cloud Recon 1 Source link
Back in October, I found a couple of issues in Etsy, which when combined could be used in a click-jacking…