Introduction If you have never performed a subdomain takeover before or would like a fresh introduction, I have devised an example scenario to help explain...

ROP attack Hello Hackers, welcome back to my write-up about binary exploitation CTF challenge. Today, we are going to solve a challenge which allowed us...

SCRIPT HTTP-SQL-INJECTION (NMAP) Download: click here for http-SQL-injection.nse The first and most basic use of Nmap scripts is to check for known vulner...

Hey guys, in this tutorial, I will be sharing my learning about account takeover which I have learned after reading some blogs only on account takeover....

I have always been getting so many questions about a career in Information Security. So today I will be answering some basic questions about starting a car...

Buffer Overflow via Environment Variables Hello exploiters, welcome back to my blog-post about binary exploitation. Today, i am going to be writing a bl...

Hey guys, myself Dheeraj and this blog is a simple writeup about the newly released tryhackme lab, “Takeover”. Room link - https://tryhackme.com/room/take...

Hi, In this section, we will explain what cross-origin resource sharing (CORS) is, describe some common examples of cross-origin resource sharing-based att...

Hey, all you chatGPT fans! I know, I know, I’m a bit behind schedule, but I think you’ll find the wait was worth it. Let’s take a dive into some of the mor...

Are you tired of spending your days hunting for bugs in your own code? Are you ready to take your bug hunting skills to the next level and start making r...

Hi everyone 👋 In this blog post, I will tell you how you can use github to search for sensitive information in repo or in whole organization. The trick is...

Sites often use HTTP or URL parameters to redirect users to a specified URL without any user action. While this behavior can be useful, it can also cause o...

Introduction: In today’s connected world, the need for robust security measures for servers and networks is more important than ever. One of the most eff...

Setting up a firewall on your Linux system is an important step in securing your network. One tool that you can use to accomplish this is Uncomplicated Fi...

Rooting Joker had three steps. The first was using TFTP to get the Squid Proxy config and creds that allowed access to a webserver listening on localhost...

What is it XXE = XML eXternal Entities XML presents a useful resource for sending data from service to service and for data processing internally but wi...