| Mon, 07 Sep 2026 22:56:00 GMT |
Foreign Companies Are Quietly Rewriting Your Privacy Rights |
cybersecurity |
Yes |
|
| Mon, 07 Sep 2026 23:21:58 GMT |
Two S3 Mistakes I Keep Finding in Real AWS Accounts (And the Fix ... |
security, cybersecurity |
Yes |
|
| Mon, 07 Sep 2026 23:21:43 GMT |
Development of IT Industry |
information-technology |
Yes |
|
| Mon, 07 Sep 2026 22:57:48 GMT |
Stop Waiting for Alerts: Threat Hunting with CoPilot Searches |
cybersecurity, information-security |
Yes |
|
| Mon, 07 Sep 2026 22:44:25 GMT |
CloudyHeist — Flagyard Forensics CTF Walkthrough |
cybersecurity |
Yes |
|
| Mon, 07 Sep 2026 22:51:01 GMT |
Beyond Private Access — Part III / Module II — Part 1 of 4 |
cybersecurity |
Yes |
|
| Mon, 07 Sep 2026 22:40:32 GMT |
PBO: Class and Object |
information-technology |
Yes |
|
| Mon, 07 Sep 2026 22:48:34 GMT |
Building an AWS Security Posture Monitor From Scratch — Part 5:... |
cybersecurity |
Yes |
|
| Mon, 07 Sep 2026 23:00:42 GMT |
The Building Nobody Voted For: How 9/11 Became the Architect of A... |
cybersecurity |
Yes |
|
| Mon, 07 Sep 2026 23:31:17 GMT |
Closing a Case on a Single Exchange Deposit Address: What to Asse... |
cyber-security-awareness |
Yes |
|
| Mon, 07 Sep 2026 23:02:20 GMT |
Building AI Hackbots — 2026 External Pentest Addition |
cybersecurity, pentesting |
Yes |
|
| Mon, 07 Sep 2026 23:35:57 GMT |
I Ran a Real AWS Scan This Week. Here’s What It Found in 60 Sec... |
security, cybersecurity |
Yes |
|
| Mon, 07 Sep 2026 19:56:19 GMT |
How To Use AI Every Day Without Getting Hacked |
hacking |
|
|
| Fri, 04 Sep 2026 08:06:53 GMT |
Understanding XSS — Part 2: Reflected XSS, Deep Dive |
xss-attack, xss-vulnerability |
|
|
| Sat, 29 Aug 2026 20:59:53 GMT |
Exploring SOAP Web Service Through Hack The Box’s DevArea |
ssrf |
|
|
| Mon, 07 Sep 2026 19:17:01 GMT |
Common Sensitive Files You Should Look For During Web Recon |
bug-bounty, hacking |
|
|
| Mon, 31 Aug 2026 11:57:29 GMT |
Why Is an API Key Not the Same as Delegated Authority for an AI A... |
bounties |
|
|
| Fri, 17 Apr 2026 04:53:23 GMT |
How I Found an Exposed Google Maps API Key on a Global Brand’s ... |
vdp |
|
|
| Sat, 20 Apr 2024 17:20:58 GMT |
TryHackMe — Brute Walkthrough | TheHiker |
log-poisoning |
|
|
| Mon, 07 Sep 2026 16:38:33 GMT |
The WordPress SEO Checklist: 21 Things to Fix Before You Expect G... |
bug-bounty-tips |
|
|
| Thu, 13 Aug 2026 16:11:01 GMT |
Vulnerability Scanning vs Penetration Testing: A Straight Answer,... |
vulnerability-scanning |
|
|
| Mon, 07 Sep 2026 08:35:44 GMT |
Splunk (SIEM) Laboratuvar Kurulumu |
infosec |
|
|
| Mon, 07 Sep 2026 19:18:10 GMT |
Why Traditional AppSec Is Not Enough in the Age of AI-Powered App... |
pentesting, vapt |
|
|
| Sun, 30 Aug 2026 18:09:16 GMT |
The npm Package I Never Chose to Install Almost Got Me |
xss-attack |
|
|
| Tue, 01 Sep 2026 20:58:58 GMT |
SQLi Without SQLi: I Asked the AI, It Queried the Database |
hackerone |
|
|
| Mon, 17 Aug 2026 10:48:46 GMT |
Google Dorking, Search Techniques, and File Formats |
google-dorking |
|
|
| Sun, 06 Sep 2026 14:35:11 GMT |
Demystifying CVE-2024-38063: Root Cause Analysis, Code Execution,... |
exploit |
|
|
| Mon, 31 Aug 2026 16:29:06 GMT |
File Inclusion Vulnerability: How a Simple File Request Can Beco... |
lfi |
|
|
| Fri, 07 Aug 2026 08:48:43 GMT |
I Built A Phishing Triage Copilot With Claude: AI Cyber Defense O... |
cybersecurity-tools |
|
|
| Sat, 15 Aug 2026 07:18:37 GMT |
I Found It on Shodan. I Never Reported It. |
shodan |
|
|
| Sun, 30 Aug 2026 06:41:32 GMT |
₹4,000 for a 2-Minute Google Search: Publicly Exposed Invoice ... |
bug-bounty-hunter |
|
|
| Mon, 07 Sep 2026 20:30:01 GMT |
Active Directory Basics | TryHackMe Writeup |
ethical-hacking |
|
|
| Wed, 15 Jul 2026 11:30:22 GMT |
TryHackMe | Google Dorking |
google-dorking |
|
|
| Mon, 07 Sep 2026 17:11:51 GMT |
AI-Powered Cyberattacks in 2026: How Hackers Use AI (And How to S... |
cyber-security-awareness |
|
|
| Sat, 08 Aug 2026 15:31:54 GMT |
Search Has Escaped |
pentest |
|
|
| Mon, 08 Jun 2026 09:48:02 GMT |
XSS WAF Bypass: The Ultimate Deep Dive |
xss-bypass |
|
|
| Thu, 18 Jun 2026 15:00:04 GMT |
Bore-dom, IP Pools, and a Nation’s Water Control: How I Breache... |
cyber-sec |
|
|
| Mon, 07 Sep 2026 20:36:00 GMT |
I Loved Him So Completely That I Eventually Had to Burn It All Do... |
vulnerability |
|
|
| Sat, 20 Dec 2025 18:21:40 GMT |
N0aziXss SubSpectre: Advanced Subdomain Discovery with Intelligen... |
subdomain-enumeration |
|
|
| Sun, 09 Aug 2026 18:20:11 GMT |
I Took Over Someone’s Subdomain and Put a Cat On It |
subdomain-takeover |
|
|
| Tue, 03 Feb 2026 17:12:47 GMT |
My First Week: 3 Business Logic Bugs in Major E-Commerce |
bug-bounty-program |
|
|
| Tue, 18 Nov 2025 18:12:40 GMT |
Dork Labs Awarded AWS Activate Startup Grant |
dorks |
|
|
| Fri, 21 Aug 2026 03:27:08 GMT |
Card Declined? So Was Your Subdomain | Featurebase as an Underco... |
subdomain-takeover |
|
|
| Sun, 16 Aug 2026 16:47:34 GMT |
Subdomain Takeover: A Real Bug I Found� |
subdomain-takeover |
|
|
| Mon, 27 Apr 2026 07:12:30 GMT |
One Weird Query String That Let Anyone Hijack Any Account in Roc... |
bounties |
|
|
| Sun, 06 Sep 2026 01:01:34 GMT |
Cross-Site Scripting (XSS) |
xss-attack, cross-site-scripting |
|
|
| Mon, 07 Sep 2026 16:17:08 GMT |
Trezor’s Wallets Were Never Hacked. Here’s Why 80,000+ Custom... |
infosec |
|
|
| Sun, 23 Aug 2026 11:07:57 GMT |
How I Found My First LLM Vulnerability and Escalated it to Admin ... |
vulnerability-disclosure |
|
|
| Sun, 23 Aug 2026 16:26:01 GMT |
Clean Up Malicious User Uploads in Laravel |
file-upload |
|
|
| Sat, 25 Apr 2026 14:46:05 GMT |
File Inclusion— Skills Assesment (HTB) |
file-inclusion |
|
|
| Fri, 28 Aug 2026 17:44:41 GMT |
Stop Describing MCP. Start Measuring It. |
security-research |
|
|
| Mon, 07 Sep 2026 14:24:58 GMT |
BIG DATA 3: Pengenalan Big Data & Instalasi Apache Hadoop (Single... |
information-technology |
|
|
| Sun, 06 Sep 2026 20:48:49 GMT |
CRLF Injection — Real-World Exploitation & Reporting ( P 3/3 ) |
bug-bounty-tips, bug-bounty-writeup |
|
|
| Mon, 07 Sep 2026 13:54:15 GMT |
What Happens When Your Secret Becomes Someone Else’s Informatio... |
information-security |
|
|
| Mon, 07 Sep 2026 11:30:43 GMT |
Third-Party Risk Management in 2026: How to Secure the Companies ... |
information-security |
|
|
| Thu, 16 Jul 2026 18:52:16 GMT |
From a URL Parameter to Full System Access: Logslinger CTF |
lfi |
|
|
| Mon, 07 Sep 2026 12:56:00 GMT |
Breaking “Login with Google� Without Touching Google: An OAut... |
bug-bounty, pentesting |
|
|
| Sun, 23 Aug 2026 19:39:11 GMT |
The vulnerability was real. The attack was not. |
vulnerability-disclosure |
|
|
| Tue, 23 Jun 2026 16:59:56 GMT |
The Internet Never Forgets : A Beginner’s Guide to OSINT |
recon |
|
|
| Wed, 22 Jul 2026 19:19:21 GMT |
Back From Vacation & Launching Open Beta: Help Us Test NextBlock ... |
bounty-program |
|
|
| Mon, 07 Sep 2026 16:51:05 GMT |
SQLi2RCE: another discovery � (part 2) |
hacking, pentesting, rce |
|
|
| Thu, 20 Aug 2026 15:40:25 GMT |
Web Application Pentesting Checklist: A Practical Methodology for... |
bug-bounty-hunter |
|
|
| Wed, 29 Jul 2026 23:59:29 GMT |
How I Found a HIGH-Severity AI Security Issue on Khan Academy’s... |
vulnerability-disclosure |
|
|
| Mon, 07 Sep 2026 12:01:40 GMT |
JavaScript for Pentesters: The Final Part — Turning Code Into S... |
vapt |
|
|
| Tue, 25 Aug 2026 14:09:26 GMT |
The URL Field That Owns Your Cloud Account — SSRF For Developer... |
ssrf |
|
|
| Mon, 07 Sep 2026 11:14:21 GMT |
Why a 100-Character Password Broke This Login Form: Username Enum... |
penetration-testing |
|
|
| Sun, 16 Aug 2026 07:51:41 GMT |
SYSTEM Privilege Escalation via Forged IPC in Foxit PDF Reader’... |
exploit |
|
|
| Fri, 29 May 2026 17:22:37 GMT |
Cracking SameSite for a $2,000 Web Cache Deception |
web-cache-poisoning |
|
|
| Sun, 15 Feb 2026 09:26:13 GMT |
TryHackMe Walkthrough -Subdomain Enumeration |
subdomain-enumeration |
|
|
| Fri, 01 Aug 2025 06:17:06 GMT |
15,000 Critical Systems Are Exposed — Thanks to This Outdat... |
censys |
|
|
| Sat, 01 Aug 2026 19:04:44 GMT |
Web Security — Part 2: Cross-Site Scripting (XSS) |
cross-site-scripting |
|
|
| Mon, 07 Sep 2026 15:38:40 GMT |
Phreaking |
infosec |
|
|
| Fri, 04 Sep 2026 09:33:10 GMT |
Can AI Distinguish a Product Bug from a Broken Test? |
bugs |
|
|
| Mon, 31 Aug 2026 13:27:33 GMT |
Accessing another user’s API key by changing the username param... |
idor |
|
|
| Mon, 07 Sep 2026 14:06:00 GMT |
The First IT Meeting Survival Guide: What Nobody Tells You Before... |
information-technology |
|
|
| Thu, 27 Mar 2025 23:46:11 GMT |
Make Break and Betrayal |
web-pentest |
|
|
| Fri, 13 Mar 2026 14:55:26 GMT |
Web Security Series #2 — Bypassing Authentication via MFA Tampe... |
bug-bounty-hunting |
|
|
| Thu, 14 Aug 2025 10:54:38 GMT |
Unlocking the Hidden Power of Search Engines |
censys |
|
|
| Thu, 20 Aug 2026 09:31:01 GMT |
Blind SSRF Without Callbacks: How I Used Timing to Prove Kubernet... |
cyber-sec |
|
|
| Fri, 12 Jun 2026 21:45:49 GMT |
TryHackMe Walkthrough: Support |
local-file-inclusion |
|
|
| Mon, 03 Aug 2026 08:01:12 GMT |
Vulnerability Scanning with Nessus: A TryHackMe Walkthrough (Setu... |
vulnerability-scanning |
|
|
| Sun, 06 Sep 2026 11:31:01 GMT |
Stored XSS: Mapping Where User Content Actually Renders |
bug-bounty-tips |
|
|
| Tue, 25 Aug 2026 02:21:01 GMT |
Recon Is the Whole Game — You’re Just Not Playing It Righ... |
google-dork, shodan |
|
|
| Wed, 01 Jul 2026 11:46:00 GMT |
Convierte acciones sencillas en recompensas reales |
bounty-program |
|
|
| Mon, 18 May 2026 13:05:18 GMT |
Subdomain Takeover |
subdomain-takeover |
|
|
| Fri, 06 Feb 2026 06:33:08 GMT |
5 Ways to Bypass Email Verification Without Using Any Tool |
bug-bounty-program |
|
|
| Fri, 04 Sep 2026 02:36:00 GMT |
Stored Cross-User XSS via Double-Decode Sanitizer Bypass in React... |
xss-attack, xss-bypass |
|
|
| Sun, 14 Jun 2026 22:00:33 GMT |
La sémantique de l’esquive : Analyse lexicologique du discours... |
lfi |
|
|
| Fri, 31 May 2024 13:29:16 GMT |
Map of the worlds best URLs 2025 |
log-poisoning |
|
|
| Sat, 05 Sep 2026 19:01:01 GMT |
Debugging Endpoints Nobody Bothers to Test Leads to Some Crits |
xss-attack, bug-bounty-writeup |
|
|
| Sun, 30 Aug 2026 19:05:17 GMT |
BOF — Walkthrough [pwnable.kr] |
exploit |
|
|
| Wed, 26 Aug 2026 11:12:57 GMT |
picoCTF Medium — No FA Writeup |
web-pentest |
|
|
| Mon, 07 Sep 2026 16:01:14 GMT |
From Hero to Zero |
information-technology |
|
|
| Mon, 20 Jul 2026 10:56:47 GMT |
Task 2 -> OSINT Techniques (Google Dorking) |
google-dorking |
|
|
| Mon, 29 Jun 2026 01:03:39 GMT |
Belajar tentang File Inclusion dalam Penetration Testing |
local-file-inclusion, file-inclusion |
|
|
| Sat, 29 Aug 2026 11:05:20 GMT |
What If an AI Tried to Hack Your Application Before Attackers Did... |
vapt |
|
|
| Thu, 20 Aug 2026 15:43:30 GMT |
Why Pessimism Can Be A Strong Cybersecurity Approach |
cybersecurity-tools |
|
|
| Sat, 22 Aug 2026 13:52:50 GMT |
SSRF Zaafiyeti ve Çözümleri |
ssrf |
|
|
| Mon, 07 Sep 2026 17:32:51 GMT |
Vulnerabilities That Even Top Security AI Agents Miss in 2026 |
bug-bounty, hacking, bug-bounty-tips |
|
|
| Fri, 04 Sep 2026 13:34:31 GMT |
PostGREShell: A 12-Year-Old PostgreSQL Vulnerability Exposes Crit... |
application-security |
|
|
| Mon, 24 Aug 2026 20:28:33 GMT |
Ghosts in the Network: Extending Mirai to Understand Modern DDoS ... |
security-research |
|
|
| Mon, 07 Sep 2026 19:27:39 GMT |
CVE-2026–19842: Deconstructing the SAML Trust Anchor Overwrite ... |
web-security, cve |
|
|
| Mon, 24 Aug 2026 23:40:30 GMT |
# Forced Team Membership via Invitation Token Leakage and Missing... |
hackerone |
|
|
| Tue, 25 Aug 2026 19:22:57 GMT |
Finding Sensitive Backend Information Through GraphQL Errors |
bugbounty-writeup |
|
|
| Mon, 07 Sep 2026 13:36:54 GMT |
Lupine VulnHub CTF Walkthrough: From SSH Key Leak to Root via Pyt... |
ethical-hacking |
|
|
| Sat, 22 Aug 2026 16:26:41 GMT |
Elementor Pro CVE-2026–32475 — Critical Unauthenticated RCE V... |
vulnerability-disclosure, remote-code-execution |
|
|
| Sun, 31 May 2026 06:49:51 GMT |
Subdomain Takeover: The Silent Killer of Web Security — Tryhack... |
subdomain-takeover |
|
|
| Wed, 26 Aug 2026 19:10:28 GMT |
PortSwigger Lab Walkthrough: User ID Controlled by Request Parame... |
api-key |
|
|
| Sun, 06 Sep 2026 00:07:36 GMT |
JetBrains Plugin Security: How a Malicious IDE Plugin Could Spy o... |
application-security |
|
|
| Sun, 06 Sep 2026 18:34:22 GMT |
Exposed Django Debug Mode on a Development Subdomain |
bug-bounty-writeup, information-disclosure |
|
|
| Fri, 04 Sep 2026 15:39:49 GMT |
GSoC Journal: Weeks 11–13 — The Bug That Kept Finding New Pla... |
bugs |
|
|
| Sat, 13 Jun 2026 15:28:09 GMT |
Cómo detectar sitios gubernamentales comprometidos con Spam SEO ... |
google-dork |
|
|
| Tue, 23 Jun 2026 14:32:52 GMT |
Authentication Bypass & Information Disclosure in a Fortune 500 C... |
vdp |
|
|
| Sat, 15 Aug 2026 18:31:56 GMT |
The Clearest Thinkers Aren’t Smarter. They Just Ask Smaller Que... |
security-research |
|
|
| Fri, 07 Aug 2026 09:37:42 GMT |
Are We Missing the #Ai Security Warning Signs? |
cyber-sec |
|
|
| Sat, 04 Jul 2026 14:47:14 GMT |
AI is built into apps now. What does that mean for data security? |
cyber-sec |
|
|
| Mon, 07 Sep 2026 13:31:01 GMT |
Why Naming Your Burnout Never Makes It Go Away (and why vulnerabi... |
vulnerability |
|
|
| Mon, 07 Sep 2026 11:31:01 GMT |
The Character Probe: Building a Filter Fingerprint in Ten Request... |
bug-bounty, infosec |
|
|
| Mon, 07 Sep 2026 20:03:37 GMT |
Slonik (Hack The Box)(Medium)an important lesson on NFS. |
penetration-testing, ethical-hacking |
|
|
| Mon, 07 Sep 2026 14:17:12 GMT |
The Good and Bad Sides of Artificial Intelligence |
information-technology |
|
|
| Sun, 17 May 2026 02:56:19 GMT |
The 3 Bug Hunting Habits That Made Me Go From $0 to $5k (And None... |
bug-bounty-program |
|
|
| Sat, 15 Aug 2026 14:31:48 GMT |
THORChain Exploit Report: The Three-Part Attack |
exploit |
|
|
| Mon, 10 Aug 2026 16:30:32 GMT |
Web Cache Deception vs Web Cache Poisoning: The Attack Paths Most... |
web-cache-poisoning |
|
|
| Mon, 10 Aug 2026 12:33:21 GMT |
Why Most “AI Penetration Testing� Talk Is Wrong — and What ... |
vulnerability-scanning |
|
|
| Mon, 07 Sep 2026 20:02:12 GMT |
When Verified Doesn’t Mean Verified: Finding a Business Logic F... |
bug-bounty |
|
|
| Fri, 04 Sep 2026 14:13:05 GMT |
What If Your API key is Stolen - |
api-key |
|
|
| Tue, 12 May 2026 17:55:36 GMT |
Wild Bounty Showdown PG Soft: Rahsia Maxwin Cowboy & Pola Gacor T... |
bounties |
|
|
| Wed, 26 Aug 2026 20:34:17 GMT |
Te pagan por hackea?? |
bug-bounty-hunter |
|
|
| Sun, 15 Mar 2026 16:45:35 GMT |
Web Security Series #4 — Discovering Unauthorized Resources via... |
bug-bounty-hunting |
|
|
| Mon, 13 Apr 2026 06:37:51 GMT |
File Inclusion on DVWA |
file-inclusion |
|
|
| Wed, 13 May 2026 23:11:19 GMT |
The Lethal Trifecta: How AI Agents With Tool Access Turn Prompt I... |
cyber-sec |
|
|
| Mon, 07 Sep 2026 11:31:01 GMT |
I Spent Four Years Insulting the Man I Would Have Married |
vulnerability |
|
|
| Wed, 26 Aug 2026 16:28:17 GMT |
How I Manipulated One Parameter to Love Another User’s Comment ... |
hackerone |
|
|
| Tue, 16 Jun 2026 13:11:36 GMT |
Understanding Web Cache Poisoning via Unkeyed Headers: A PortSwig... |
web-cache-poisoning |
|
|
| Mon, 31 Aug 2026 06:09:42 GMT |
MXT Universal File Dropper: A Unified File Upload and Document Ma... |
file-upload |
|
|
| Fri, 04 Sep 2026 04:42:09 GMT |
The Rock Has a Trigger: How Notepad Got Its First 8.8 CVE |
cve |
|
|
| Sat, 29 Aug 2026 23:05:11 GMT |
How I Turned Self-XSS into Reflected XSS (and Bypassed the WAF) |
xss-attack |
|
|
| Sat, 18 Jul 2026 16:21:01 GMT |
Guide Presents Best Cybersecurity Investments for Small Business ... |
cybersecurity-tools |
|
|
| Wed, 12 Feb 2025 22:46:35 GMT |
https://www.express.co.uk/life-style/property/2012927/cleaning-ch... |
web-pentest |
|
|
| Thu, 09 Oct 2025 18:33:05 GMT |
0-click Account Takeover via Punycode |
bug-bounty-program |
|
|
| Sat, 08 Aug 2026 12:57:41 GMT |
Bir XSS Turu: Temelden Az Bilinene (9 farklı senaryo) |
xss-vulnerability, xss-bypass |
|
|
| Wed, 12 Aug 2026 21:51:22 GMT |
DOM Invader on a Real Bug Bounty Target |
cross-site-scripting |
|
|
| Mon, 07 Sep 2026 16:06:59 GMT |
Nobody Offboards a Guest |
information-security |
|
|
| Tue, 01 Sep 2026 20:48:14 GMT |
I Asked Them To delete The Account ------ They Told Me Yes |
hackerone |
|
|
| Sun, 26 Jan 2025 19:08:11 GMT |
Matrix strike’s back against honesty from a power stance |
web-pentest |
|
|
| Thu, 03 Sep 2026 06:34:00 GMT |
WebDecode — picoCTF Write-up | Finding and Decoding a Hidden F... |
information-disclosure |
|
|
| Thu, 03 Sep 2026 22:40:43 GMT |
How a Simple Dork Led to a Critical 10.0 CVSS |
vulnerability-disclosure |
|
|
| Mon, 31 Aug 2026 16:53:51 GMT |
Critical Vulnerability Alert: CVE-2026–77806 — SPIP Unauthen... |
remote-code-execution |
|
|
| Thu, 13 Feb 2025 03:29:37 GMT |
ZoomEye Meets DeepSeek: AI-Powered Cyberspace Intelligence |
zoomeye |
|
|
| Mon, 07 Sep 2026 19:24:37 GMT |
DC-9 ( DC-9 Walkthrough: From SQL Injection to Root Access) |
penetration-testing, cyber-security-awareness |
|
|
| Thu, 03 Sep 2026 06:34:13 GMT |
Bypassing WhatsApp Web’s Single-Session Restriction Using an In... |
bug-bounty-hunting |
|
|
| Mon, 29 Jun 2026 10:46:38 GMT |
Costa Rica Canopy Tours: Choosing Experiences That Match Your Com... |
directory-listing |
|
|
| Wed, 01 Jul 2026 11:07:22 GMT |
Archangel TryHackMe Walkthrough | LFI, Log Poisoning & Linux Pri... |
local-file-inclusion |
|
|
| Mon, 07 Sep 2026 09:55:22 GMT |
Vulnerability Assessment and Penetration Testing: A Proactive App... |
vapt |
|
|
| Mon, 18 May 2026 14:37:14 GMT |
File Inclusion - Challenge Part | TryHackMe Walkthrough |
file-inclusion |
|
|
| Mon, 04 May 2026 14:48:00 GMT |
I Found 150+ Vulnerabilities in DeFi Protocols. Here’s Why I C... |
bounties |
|
|
| Mon, 07 Sep 2026 05:01:01 GMT |
Lab #1 SQL injection vulnerability in WHERE clause allowing retri... |
penetration-testing |
|
|
| Thu, 20 Aug 2026 18:51:36 GMT |
How I Got RCE Through a Simple Collaboration Invitation in a Desk... |
rce |
|
|
| Sat, 25 Oct 2025 12:23:25 GMT |
How to find leaks on GitHub as a beginner. Logic is main key |
github-dorking |
|
|
| Thu, 28 Sep 2023 23:05:39 GMT |
Archangel — TryHackMe |
log-poisoning |
|
|
| Fri, 12 Jun 2026 12:04:09 GMT |
The Print Button That Handed Me Your Account: Stored XSS to Full ... |
xss-bypass |
|
|
| Thu, 23 Jul 2026 17:59:49 GMT |
HTB SpookyPass Writeup |
cyber-sec |
|
|
| Sat, 15 Aug 2026 11:35:16 GMT |
A Fast Recon Workflow for Spotting XSS Candidates |
cross-site-scripting |
|
|
| Sun, 06 Sep 2026 14:16:00 GMT |
The 12-Year Hole in PostgreSQL’s Replication Layer |
cve |
|
|
| Thu, 11 Sep 2025 22:20:14 GMT |
It’s Coming: DorkFi Delivers PreFi Rewards Surge |
dorking |
|
|
| Mon, 07 Sep 2026 12:01:45 GMT |
Alpwned — From SQL Injection to Root |
ethical-hacking |
|
|
| Mon, 07 Sep 2026 16:56:05 GMT |
Why I’m Not Coming Back to Instagram |
cyber-security-awareness |
|
|
| Mon, 07 Sep 2026 14:51:11 GMT |
Fools Mate — TryHackMe Writeup |
bug-bounty, hacking |
|
|
| Wed, 15 Jul 2026 12:56:40 GMT |
I Just Wanted a Cold Coffee. Instead I Found a Master Key to a Ve... |
vdp |
|
|
| Fri, 28 Aug 2026 00:57:49 GMT |
From File Upload to RCE: Understanding Chankro and LD_PRELOAD in ... |
rce |
|
|
| Wed, 22 Oct 2025 14:11:32 GMT |
Mastering Subdomain Enumeration: A Beginner’s Guide to Expandin... |
subdomain-enumeration |
|
|
| Sun, 30 Aug 2026 20:25:45 GMT |
I found an Apple ID Enumeration Oracle in iCloud Keychain Escrow |
security-research |
|
|
| Mon, 07 Sep 2026 18:08:40 GMT |
Breaking Down a Healthcare Web Application: A Complete VAPT Walk... |
bug-bounty, pentesting, ethical-hacking |
|
|
| Fri, 19 Jun 2026 20:02:36 GMT |
TryHackMe: Support Ops Platform Walkthrough |
lfi |
|
|
| Tue, 01 Sep 2026 13:14:48 GMT |
THM — SHELL OVERVIEW — Practical Task |
vapt |
|
|
| Sun, 30 Aug 2026 20:48:05 GMT |
5 Real World XSS Bypasses I Discovered in 2026 |
xss-attack |
|
|
| Thu, 09 Jul 2026 12:43:47 GMT |
The Easy Bug Series | #01 |
bounty-program |
|
|
| Mon, 07 Sep 2026 18:15:36 GMT |
One Web Vulnerability. One Pivot. The Entire Domain. |
penetration-testing, ethical-hacking |
|
|
| Thu, 02 Oct 2025 06:59:46 GMT |
Endless Cashback Glitch:How I Unlocked Unlimited Free Orders with... |
bug-bounty-program |
|
|
| Thu, 20 Aug 2026 09:21:53 GMT |
From Open Ports to Vulnerabilities: My Hands-On Practice with Nma... |
vulnerability-scanning |
|
|
| Wed, 27 May 2026 19:50:08 GMT |
Why Your Directory Listing Service Isn’t Working — And the Fr... |
directory-listing |
|
|
| Thu, 11 Jun 2026 05:26:16 GMT |
START HERE, MANIFESTO |
dorks |
|
|
| Wed, 26 Aug 2026 17:50:12 GMT |
I Was About to Pay More for Claude Code. Then I Found 5 Frontier ... |
api-key |
|
|
| Mon, 07 Sep 2026 14:16:14 GMT |
human connection and the film ‘her’ (2013) |
vulnerability |
|
|
| Fri, 04 Sep 2026 03:19:43 GMT |
Your Code Works… But Is It Secure? A Free Review Can Tell You |
application-security |
|
|
| Sat, 05 Sep 2026 06:35:21 GMT |
Remote Code Execution (RCE) in 2026: From Zero to Understanding H... |
bug-bounty-writeup |
|
|
| Mon, 20 Jul 2026 06:24:37 GMT |
Using Cache Deception Techniques to Discover Cache Poisoning Vect... |
web-cache-poisoning |
|
|
| Thu, 06 Aug 2026 00:39:43 GMT |
Nmap Basic Port Scans (versão em português) |
pentest |
|
|
| Mon, 07 Sep 2026 20:33:21 GMT |
MikroTrick: Active Exploitation of Critical MikroTik RouterOS Vul... |
vulnerability |
|
|
| Fri, 04 Sep 2026 13:15:49 GMT |
300$ ETag Bounty |
hackerone, bug-bounty-writeup |
|
|
| Wed, 20 May 2026 20:47:25 GMT |
FINDING INFORMATION QUICKLY AND ACCURATELY WITH GOOGLE DORK |
github-dorking |
|
|
| Tue, 18 Nov 2025 13:26:47 GMT |
GitHub Dorking: The Hunter’s Guide to Finding Secrets in Public... |
github-dorking |
|
|
| Mon, 03 Aug 2026 20:29:20 GMT |
Sublist3r |
subdomain-enumeration |
|
|
| Wed, 17 Jun 2026 07:53:43 GMT |
Operation Liwanag: The Same Map a Chinese Intelligence Asset Drew... |
censys |
|
|
| Mon, 07 Sep 2026 11:56:24 GMT |
Who is a Hucker(hacker) |
bug-bounty |
|
|
| Fri, 04 Sep 2026 09:03:21 GMT |
Bug Bugger Buggest |
bugs |
|
|
| Mon, 07 Sep 2026 15:30:03 GMT |
Phreaking |
information-security |
|
|
| Mon, 07 Sep 2026 14:17:42 GMT |
What It Really Takes to Build a Sustainable SOC: Lessons From the... |
cyber-security-awareness |
|
|
| Tue, 25 Aug 2026 17:04:09 GMT |
TryHackMe Agent-T Writeup |
remote-code-execution |
|
|
| Mon, 07 Sep 2026 15:55:46 GMT |
Self-Healing Tests Sound Great — But Can They Hide Real Bugs? |
bugs |
|
|
| Fri, 07 Aug 2026 20:55:06 GMT |
Lá»— hổng bảo máºt trong bà n phÃm Tiếng Việt của Mic... |
information-disclosure |
|
|
| Tue, 21 Apr 2026 14:42:50 GMT |
Web Security Series # 16— Exploiting Local File Inclusion (LFI) |
file-inclusion |
|
|
| Thu, 13 Aug 2026 20:45:44 GMT |
What About the Security of Hosting Control Panels? Story of the C... |
security-research |
|
|
| Sat, 18 Jul 2026 19:00:12 GMT |
XSS Bypass — The Hackers Labs |
xss-bypass |
|
|
| Wed, 01 Jul 2026 11:02:50 GMT |
Bounty Hacker |
bounties |
|
|
| Mon, 07 Sep 2026 11:39:44 GMT |
Testing JWT Authentication in Modern APIs: A Practical Security A... |
web-security, information-security |
|
|
| Sat, 05 Sep 2026 11:31:00 GMT |
URL Contexts: href, src, and the javascript: Bridge |
bug-bounty-tips |
|
|
| Wed, 19 Aug 2026 06:57:55 GMT |
CVE-2026–40901: DataEase Root RCE via Unfiltered Quartz Deseria... |
rce |
|
|
| Mon, 07 Sep 2026 13:31:02 GMT |
Building GhostShell: A Modern Python & Flask Security Suite for A... |
penetration-testing, ethical-hacking, vulnerability-scanning |
|
|
| Thu, 27 Aug 2026 12:02:31 GMT |
One Restaurant Account. 23,000+ Order IDs. One Very Big MQTT Prob... |
bugcrowd |
|
|
| Sun, 26 Jul 2026 18:57:30 GMT |
The OSI Model Explained: A Cybersecurity Intern’s Guide to Unde... |
cybersecurity-tools |
|
|
| Tue, 17 Mar 2026 09:18:53 GMT |
Web Security Series #6 — Exploiting SQL Injection to Extract Se... |
bug-bounty-hunting |
|
|
| Mon, 31 Aug 2026 15:59:43 GMT |
How an IDOR + OSINT Investigation Exposed a Company |
idor |
|
|
| Tue, 15 Jul 2025 12:15:58 GMT |
“Secure� OPC UA Setups Are Being Hacked — Here’s Why |
censys |
|
|
| Tue, 30 Jun 2026 11:31:00 GMT |
Subdomain Takeover — Claiming Forgotten Assets |
subdomain-takeover |
|
|
| Mon, 07 Sep 2026 13:20:12 GMT |
CVE-2024–1086 Explained | Linux Kernel Exploitation with Chim... |
bug-bounty |
|
|
| Sat, 29 Aug 2026 19:50:44 GMT |
Patching One Instance Does Not Fix the Class: PHP Object Injectio... |
remote-code-execution |
|
|
| Wed, 23 Jul 2025 15:15:01 GMT |
TryHackMe Include walkthrough: SSRF, log poisoning & LFI2RCE, wit... |
log-poisoning |
|
|
| Wed, 29 Jul 2026 04:46:59 GMT |
Shodan.io Integration with Wazuh SIEM Monitor Your Critical Asset... |
shodan |
|
|
| Mon, 07 Sep 2026 16:09:55 GMT |
Do We Still Need Burp Suite for Web Security Testing? |
hacking |
|
|
| Thu, 03 Sep 2026 16:11:38 GMT |
Part 1 — Cross-Site Scripting (XSS): What It Is & How It Ac... |
xss-attack, cross-site-scripting |
|
|
| Wed, 25 Feb 2026 01:47:45 GMT |
How I Found a Path Traversal in the Rancher Dashboard via HAR Rep... |
web-pentest |
|
|
| Tue, 14 Apr 2026 13:07:05 GMT |
My “Gemini� Is Named Mike |
dorks |
|
|
| Mon, 07 Sep 2026 18:56:17 GMT |
Access Token & Refresh Token: How Web Authentication Actually Wor... |
security |
|
|
| Fri, 17 Apr 2026 19:01:54 GMT |
The Ultimate Guide to Wayback Machine Dorking for Deleted Leaks |
dorking |
|
|
| Fri, 21 Aug 2026 12:06:01 GMT |
CVE-2026–55224: Deep-Dive into MineAdmin Plugin Path Traversal... |
remote-code-execution |
|
|
| Tue, 09 Jun 2026 07:00:48 GMT |
Costa Rica Beaches: Which Ones Are Worth the Drive |
directory-listing |
|
|
| Tue, 22 Apr 2025 10:38:20 GMT |
Trump’s Tariffs Cut Out Censys — ZoomEye Steps In Strong! |
zoomeye |
|
|
| Sun, 06 Sep 2026 01:53:14 GMT |
How to Configure Subfinder with API Keys for Better Passive Subdo... |
recon |
|
|
| Mon, 07 Sep 2026 17:41:58 GMT |
The Negotiation Script: What to Say When Salary Comes Up |
information-technology |
|
|
| Wed, 19 Aug 2026 13:12:54 GMT |
Auth Bypass : A Story of LinkedIn's Sneaky Session Update Bypass |
hackerone |
|
|
| Thu, 04 Dec 2025 04:45:36 GMT |
What is Google Dorking? |
dorking |
|
|
| Mon, 27 Jul 2026 19:32:54 GMT |
Brew Bank Official Writeup | EYCC CTF |
lfi |
|
|
| Tue, 23 Jun 2026 07:06:16 GMT |
Bug Bounty Recon Mastery →Advanced Reconnaissance and Attack Su... |
subdomain-enumeration |
|
|
| Fri, 14 Aug 2026 07:35:55 GMT |
Claude için Anthropic’den Nasıl Api Key Alınır (2026) |
api-key |
|
|
| Sat, 29 Aug 2026 15:04:37 GMT |
From Zero Credentials to Super Admin: An SSO Authentication Bypas... |
hackerone |
|
|
| Mon, 07 Sep 2026 13:45:13 GMT |
L’IA pour pentester son propre SI : mirage marketing ou vraie r... |
pentesting |
|
|
| Sat, 05 Sep 2026 05:06:34 GMT |
How AppSec Helps Businesses Avoid Costly Security Failures |
application-security |
|
|
| Wed, 19 Aug 2026 07:58:40 GMT |
Recruit — TryHackMe Walkthrough: From Local File Inclusion to A... |
local-file-inclusion |
|
|
| Tue, 01 Sep 2026 09:32:25 GMT |
What Are VAPT Services and Why Does Your Business Need Them? |
vapt |
|
|
| Mon, 07 Sep 2026 21:26:21 GMT |
today, i looked within. |
vulnerability |
|
|
| Mon, 07 Sep 2026 10:36:03 GMT |
A Comparison of TF-IDF-Based SQL Injection Detection Systems Usin... |
web-security |
|
|
| Mon, 07 Sep 2026 06:35:56 GMT |
Your Website Passed the Test. So Why Is Everyone Complaining? |
bugs |
|
|
| Mon, 07 Sep 2026 16:22:32 GMT |
GREYBOX VAPT |
pentesting, vapt |
|
|
| Mon, 07 Sep 2026 05:49:36 GMT |
1.5 Years of VDP, 6 CVEs, and the Finding That Felt Different: Ha... |
cve |
|
|
| Sat, 20 Jun 2026 07:44:22 GMT |
Ağınız Dışarıdan Nasıl Görünüyor? Shodan İle Kurumsal ... |
shodan |
|
|
| Fri, 21 Aug 2026 05:15:30 GMT |
FORCEDENTRY — Pegasus’ning iMessage orqali zero-click hujumi ... |
cyber-sec |
|
|
| Mon, 07 Sep 2026 07:13:49 GMT |
DNS Tunneling: How Hackers Use Your Internet’s “Phone Book�... |
infosec |
|
|
| Fri, 31 Jul 2026 08:05:40 GMT |
Room 404 (THM) Tryhackme Walkthrough [Hacker Holidays : Day 2] |
information-disclosure |
|
|
| Sun, 23 Aug 2026 16:18:39 GMT |
PostgreSQL injection, Dumping data, Privileges, reading files and... |
remote-code-execution |
|
|
| Mon, 07 Sep 2026 09:57:32 GMT |
Uncovering an Open Redirect Using Wayback |
bug-bounty-tips, bugbounty-writeup, bug-bounty-writeup |
|
|
| Tue, 25 Aug 2026 09:49:53 GMT |
B2B Directory Listing Sites: Top 10 for 2026 |
directory-listing |
|
|
| Tue, 11 Aug 2026 05:47:01 GMT |
EasyStore (Joomla) filter_sortby Pre-Authentication SQL Injection... |
exploit |
|
|
| Tue, 21 Jul 2026 14:58:07 GMT |
“Join Team� | CyberTalents | Chaining LFI and Unrestricted ... |
lfi |
|
|
| Fri, 14 Aug 2026 17:39:40 GMT |
One IDOR, Three Leaks, $3K in Payouts |
bug-bounty-hunter |
|
|
| Mon, 07 Sep 2026 02:04:42 GMT |
One Parameter One User’s Phone Number And Someone Else’s Emai... |
bug-bounty-tips, bug-bounty-writeup, vapt |
|
|
| Sat, 05 Sep 2026 17:09:47 GMT |
From a PDF Export Button to Full AWS Credential Theft: An SSRF Wr... |
bug-bounty-tips |
|
|
| Sat, 05 Sep 2026 02:15:24 GMT |
A Pretty, but Confused, Moth in my Yard |
bugs |
|
|
| Fri, 04 Sep 2026 11:31:01 GMT |
Seu bug está correto. Então por que ninguém faz nada? |
bugs |
|
|
| Wed, 24 Jun 2026 19:59:01 GMT |
From an Informational Finding to a Valuable Lesson: My IDOR Disco... |
bugcrowd |
|
|
| Wed, 19 Aug 2026 20:44:15 GMT |
SSRF with filter bypass via open redirection vulnerability | por... |
ssrf |
|
|
| Sat, 15 Aug 2026 01:26:32 GMT |
The 2026 Jeep Recon: A Jeep that lets you relive the Top Gear Bot... |
recon |
|
|
| Mon, 07 Sep 2026 06:22:47 GMT |
Password Reset Vulnerability to Full Account Takeover |
web-security, application-security |
|
|
| Tue, 01 Sep 2026 19:13:24 GMT |
pixi on UBI-micro: A Safer, Smaller Multi-Stage Container Build |
vulnerability-scanning |
|
|
| Fri, 04 Sep 2026 07:52:04 GMT |
Setting Up a Content Security Policy for Filestack Uploads |
file-upload |
|
|
| Fri, 24 Jan 2025 09:34:52 GMT |
A new Holistic temple opening InLeeds |
web-pentest |
|
|
| Sat, 05 Sep 2026 18:21:46 GMT |
Airbuds Bug Bounty: How I Deleted Anyone’s Post With a Single R... |
bug-bounty-writeup |
|
|
| Fri, 21 Aug 2026 13:26:34 GMT |
Cyber Lens: The Ultimate Free Google Dorking Tool for Ethical Hac... |
bug-bounty-hunter |
|
|
| Thu, 03 Sep 2026 17:58:37 GMT |
PortSwigger Lab: Insecure direct object references |
idor |
|
|
| Tue, 01 Sep 2026 21:29:01 GMT |
Understanding WHOIS Lookup: My Visual Cybersecurity Notes When le... |
bugbounty-writeup |
|
|
| Sun, 06 Sep 2026 19:01:00 GMT |
Turning a Harmless Self-XSS Into a Full Profile Takeover |
web-security |
|
|
| Mon, 07 Sep 2026 14:58:50 GMT |
Your Biggest Security Risk May Already Be Inside Your Company |
cyber-security-awareness |
|
|
| Thu, 09 Jul 2026 23:38:38 GMT |
AtDork 1.3.9.6? 180,000 Dorks free open source |
google-dork, dorks |
|
|
| Tue, 21 Jul 2026 19:02:10 GMT |
La gauche radicale face au piège de l’essentialisation des jui... |
lfi |
|
|
| Mon, 07 Sep 2026 08:36:36 GMT |
How to Implement Continuous Agentic Pentesting for the Web |
web-security |
|
|
| Sun, 21 Sep 2025 07:02:30 GMT |
Affordable but Vulnerable? The Dark Side of CMORE HMI |
censys |
|
|
| Fri, 21 Aug 2026 10:55:32 GMT |
Managing Scan Results in Metasploit |
recon |
|
|
| Sat, 05 Sep 2026 17:00:31 GMT |
The $1 Full Video: How RedHunter Found and Self-Validated a Price... |
application-security |
|
|
| Sun, 05 Apr 2026 20:11:41 GMT |
I Tried Logging In… and Accidentally Did Responsible Disclosure... |
vdp |
|
|
| Mon, 18 May 2026 00:04:46 GMT |
GOOGLE DORK Ä°LE BÄ°LGÄ°YÄ° HIZLI VE DOÄžRU BULMA |
github-dorking |
|
|
| Wed, 02 Sep 2026 11:25:50 GMT |
My Autonomous Hunt Harness Found a Critical BOLA That Let Any Aut... |
idor |
|
|
| Sat, 15 Aug 2026 09:32:04 GMT |
Sol in the shade: benchmarking Opus 4.6 and GPT-5.6 Sol for findi... |
security-research |
|
|
| Mon, 17 Aug 2026 19:27:10 GMT |
How I Took Over Any Employee Account With Just a Username |
bugcrowd |
|
|
| Mon, 07 Sep 2026 11:05:19 GMT |
Cross-Site Scripting (XSS): A Practical Guide for Web VAPT |
xss-vulnerability |
|
|
| Mon, 24 Aug 2026 03:01:03 GMT |
Subdomain Takeover: When a Dead DNS Record Becomes Your Entry Poi... |
subdomain-takeover |
|
|
| Fri, 05 Jun 2026 04:49:28 GMT |
Price Manipulation in Payment Gateway / Shopping Cart |
vdp |
|
|
| Sun, 23 Aug 2026 17:24:14 GMT |
Hack The Box — Langflow RCE Write-up |
rce |
|
|
| Mon, 16 Mar 2026 14:32:42 GMT |
Web Security Series #5 — Exploiting Broken Access Control via T... |
bug-bounty-hunting |
|
|
| Mon, 03 Aug 2026 09:22:06 GMT |
Server-2: Vulnerable OnlyPhone— VulnerabilityWeb Walkthrough (4... |
directory-listing |
|
|
| Sat, 02 Aug 2025 14:15:23 GMT |
The Silent Risk in Your ICS: Why S7 Protocol Needs Security Atten... |
censys |
|
|
| Mon, 22 Jun 2026 17:59:47 GMT |
How I Recon a Target, Part Two: Now We Poke It |
recon |
|
|
| Thu, 11 Jun 2026 04:44:15 GMT |
AtDork dorking tools |
google-dork |
|
|
| Tue, 26 May 2026 23:44:37 GMT |
Intigriti May 2026 Challenge: XSS via Stored Payload & SCA Shield... |
xss-bypass |
|
|
| Mon, 07 Sep 2026 14:16:49 GMT |
I Started Learning Cybersecurity 10 Articles Ago — Here’s Wha... |
web-security, ethical-hacking |
|
|
| Sun, 23 Aug 2026 23:34:44 GMT |
Understanding and Attacking DRM in Video Streaming |
security-research |
|
|
| Thu, 23 Jul 2026 00:27:46 GMT |
Bug Bounty Automation — Elite Recon Pipeline + bonus Script |
recon |
|
|
| Mon, 27 Jan 2025 16:51:28 GMT |
The man who suffered 11 years in hell for freedom has now been fr... |
web-pentest |
|
|
| Mon, 07 Sep 2026 17:35:53 GMT |
Jaringan Komputer: Pembuatan Kabel Jaringan UTP |
information-technology |
|
|
| Mon, 07 Sep 2026 21:40:45 GMT |
The Green Dashboard Problem |
infosec |
|
|
| Fri, 28 Aug 2026 21:50:08 GMT |
From a Leaky JS Sourcemap to Root: Breaking “Hack Smarter World... |
rce |
|
|
| Mon, 27 Jul 2026 19:35:36 GMT |
Brew Bank Revenge — Official Writeup | EYCC CTF |
lfi |
|
|
| Sun, 05 Jul 2026 12:32:24 GMT |
How to Pick a Directory Listing Service That Actually Works |
directory-listing |
|
|
| Wed, 16 Jul 2025 12:07:42 GMT |
Hackers Love This 1979 Protocol (Because It Can’t Defend Itself... |
censys |
|
|
| Sat, 30 May 2026 11:25:12 GMT |
Cross-Site Scripting (XSS) via Client-Side Filter Bypass |
xss-bypass |
|
|
| Mon, 07 Sep 2026 09:02:33 GMT |
TryHackMe: Offensive Security Intro Room Walkthrough |
penetration-testing, infosec |
|
|
| Sat, 04 Jul 2026 14:44:26 GMT |
Behind the Screen Name: Cybersecurity in |
cyber-sec |
|
|
| Fri, 28 Aug 2026 16:59:55 GMT |
The FTP Bug That Only Azure Could Give Us (And Why We’re Gratef... |
file-upload |
|
|
| Mon, 07 Sep 2026 20:43:03 GMT |
Is Your Home Truly Safe? |
security |
|
|
| Mon, 25 May 2026 09:26:41 GMT |
Web Önbelleği Zehirlenmesi |
web-cache-poisoning |
|
|
| Mon, 07 Sep 2026 09:24:39 GMT |
Stop Memorizing Hacking Tools: 5 Rookie Traps in Cybersecurity (A... |
infosec |
|
|
| Tue, 28 Jul 2026 16:43:20 GMT |
Two JWT Mistakes That Can Compromise Your Authentication System |
cross-site-scripting |
|
|
| Thu, 21 May 2026 15:16:28 GMT |
How to Bypass LinkedIn Commercial Use Limit in 2026 (Without Payi... |
google-dorking |
|
|
| Sat, 25 Jul 2026 15:42:11 GMT |
#DevelopersWeapon (Left) vs#CybersecurityWeapon(Right) |
cybersecurity-tools |
|
|
| Fri, 14 Aug 2026 16:26:48 GMT |
ADCS — ESC2 Zafiyeti |
pentest |
|
|
| Sat, 09 May 2026 02:26:22 GMT |
How I Discovered a Reflected XSS Vulnerability on a Major German ... |
xss-bypass |
|
|
| Mon, 25 May 2026 14:19:37 GMT |
Look at this, we created this |
bounties |
|
|
| Mon, 07 Sep 2026 15:56:41 GMT |
How to Prompt AI Like a Software Engineer |
information-technology |
|
|
| Fri, 04 Sep 2026 07:35:15 GMT |
The bug that only appears for readers who translate your page |
bugs |
|
|
| Mon, 07 Sep 2026 12:59:13 GMT |
From Alert to Investigation: My Hands-On SOC Phishing Investigati... |
information-security, cyber-security-awareness |
|
|
| Sun, 05 Jul 2026 11:31:00 GMT |
Google Dorking for Bug Hunters |
google-dork |
|
|
| Mon, 07 Sep 2026 15:56:21 GMT |
Mobile App or Web App? How Should You Decide? |
information-technology |
|
|
| Mon, 13 Apr 2026 03:31:01 GMT |
Google Dorks Google Ko Bana Do Apna Hacking Tool: Free Mein Bugs ... |
github-dorking |
|
|
| Tue, 14 Jul 2026 17:10:47 GMT |
File Inclusion Challenge (TryHackMe) |
file-inclusion |
|
|
| Wed, 05 Aug 2026 14:04:53 GMT |
Overheard at Breakfast (THM) Tryhackme Walkthrough Hacker Holiday... |
information-disclosure |
|
|
| Mon, 04 May 2026 12:56:26 GMT |
Beyond alert(1): Advanced XSS Payload Crafting, Filter Bypasses &... |
xss-bypass |
|
|
| Mon, 18 May 2026 07:01:05 GMT |
InterLink Migration Vote Begins | Active Bounty Season 3 |
bounty-program |
|
|
| Fri, 28 Aug 2026 00:00:12 GMT |
Give AI Agents API Access Without Exposing API Keys |
api-key |
|
|
| Sun, 14 Dec 2025 06:37:06 GMT |
My Bug Bounty Diary |
subdomain-enumeration |
|
|
| Thu, 16 Jul 2026 04:28:38 GMT |
How to Install GAU (GetAllURLs) Tool on Kali Linux — Complete G... |
bugcrowd |
|
|
| Sun, 02 Aug 2026 12:36:24 GMT |
Complimentary (THM) Tryhackme Walkthrough Hacker Holidays Day 3 |
information-disclosure |
|
|
| Mon, 31 Aug 2026 06:57:58 GMT |
Patching the Vulnerability Doesn’t Mean the Attack Is Over |
vapt |
|
|
| Fri, 19 Sep 2025 07:40:16 GMT |
How I Tracked Our Clients’ Device Versions Without Direct Repor... |
zoomeye |
|
|
| Tue, 01 Sep 2026 13:21:00 GMT |
Client side vulnerabilities that every hacker should know |
xss-attack |
|
|
| Thu, 03 Sep 2026 11:32:24 GMT |
How “Cancel� Button deletes entire business: Discovering a CS... |
hackerone |
|
|
| Mon, 31 Aug 2026 07:24:50 GMT |
The Interceptor That Fetched Anything: 1-Click Native Takeover in... |
bugbounty-writeup |
|
|
| Sat, 05 Sep 2026 09:48:43 GMT |
Do You Actually Need a Consent Management Platform as a Solo Deve... |
application-security |
|
|
| Tue, 10 Feb 2026 23:04:46 GMT |
Effective Dorking Tools |
dorking |
|
|
| Wed, 29 Jul 2026 06:41:51 GMT |
What is Web Cache Poisoning? |
web-cache-poisoning |
|
|
| Tue, 01 Sep 2026 18:58:52 GMT |
Spoofing Super Admins: An IDOR Vulnerability in Enterprise Messag... |
idor |
|
|
| Fri, 14 Aug 2026 07:06:54 GMT |
CVE-2026–39987: Marimo Pre-Authentication Remote Code Execution |
security-research |
|
|
| Mon, 07 Sep 2026 15:48:58 GMT |
Black Box vs White Box vs Gray Box Pentesting: Picking the Right ... |
pentesting, application-security |
|
|
| Thu, 03 Sep 2026 15:26:57 GMT |
Portswigger XSS Lab : Reflected XSS into HTML context with nothin... |
xss-vulnerability |
|
|
| Tue, 21 Jul 2026 03:32:29 GMT |
Best Python Libraries for Vulnerability Scanning |
vulnerability-scanning |
|
|
| Mon, 24 Aug 2026 11:13:05 GMT |
Fools guide to UAT-10147 |
pentest |
|
|
| Sun, 16 Aug 2026 07:44:19 GMT |
ADCS — ESC4 Zafiyeti |
pentest |
|
|
| Wed, 20 May 2026 11:18:33 GMT |
Me Before Digiss vs Me Now in Digiss: How My Cybersecurity Learni... |
cyber-sec |
|
|
| Sat, 08 Aug 2026 07:05:04 GMT |
Chaining Information Disclosure, SMB Access, and Sudo Misconfigur... |
information-disclosure |
|
|
| Wed, 29 Jul 2026 12:30:32 GMT |
Is Google Dorking Legal? Understanding the Ethical and Legal Aspe... |
google-dorking, google-dork |
|
|
| Tue, 16 Jun 2026 11:22:14 GMT |
Review AtDork: Tool Dorking Python Terbaik 2026? |
dorking |
|
|
| Mon, 07 Sep 2026 13:35:58 GMT |
DNS Zone Transfer (AXFR): When a Misconfiguration Exposes Your DN... |
vulnerability, ethical-hacking |
|
|
| Mon, 31 Aug 2026 07:12:11 GMT |
Is VAPT Mandatory for the IT Industry? A Practical Security and C... |
vapt |
|
|
| Thu, 18 Jun 2026 11:52:47 GMT |
¿Usas Intercambio? |
bounty-program |
|
|
| Fri, 12 Jun 2026 10:04:19 GMT |
ATDORK |
google-dork |
|
|
| Fri, 26 Jun 2026 06:25:44 GMT |
Costa Rica Canopy Tours: Choosing Experiences That Match Your Com... |
directory-listing |
|
|
| Sat, 05 Sep 2026 14:07:18 GMT |
OS Command Injection in ip link show via Unsanitized param Argume... |
cve |
|
|
| Sat, 08 Aug 2026 17:56:15 GMT |
LazyHound: The Smart Enumeration Engine That Finds the Direct Pat... |
cybersecurity-tools |
|
|
| Tue, 18 Nov 2025 08:33:41 GMT |
A Chain of Vulnerabilities Leading to Critical Information Disclo... |
bug-bounty-program |
|
|
| Tue, 01 Sep 2026 21:44:08 GMT |
PortSwigger Lab: User ID controlled by request parameter with pas... |
idor |
|
|
| Thu, 28 May 2026 15:59:28 GMT |
File Inclusion Vulnerability Assessment |
file-inclusion |
|
|
| Tue, 14 Jul 2026 16:44:08 GMT |
TuesdayTool 48: OSINTLeak — A Modern OSINT Platform for Digital... |
cybersecurity-tools |
|
|
| Mon, 07 Sep 2026 16:17:22 GMT |
Microsoft Teams Is Hiding QR Codes to Stop Phishing Attacks |
infosec |
|
|
| Mon, 27 Jul 2026 19:35:52 GMT |
AI Slop Is Drowning Bug Bounty Programs — Here’s How to Write... |
bugcrowd |
|
|
| Thu, 07 May 2026 06:41:01 GMT |
Github Dorking |
dorking, github-dorking |
|
|
| Sat, 01 Aug 2026 13:18:29 GMT |
Incident Analysis & Response: Check Point Security Gateway CVE-20... |
lfi |
|
|
| Tue, 01 Sep 2026 14:24:04 GMT |
TryHackMe Neighbour — Walkthrough |
idor |
|
|
| Thu, 03 Sep 2026 05:29:39 GMT |
PortSwigger XSS Labs Walkthrough: Reflected, Stored, DOM & CSP By... |
cross-site-scripting |
|
|
| Wed, 19 Aug 2026 20:18:39 GMT |
How to Find IDOR Vulnerabilities in Bug Bounty |
bugbounty-writeup |
|
|
| Fri, 14 Aug 2026 04:48:26 GMT |
MariaDB 13.0.1-rc RCE: Priv-Esc + Heap UAF + JOP Chain to system(... |
exploit |
|
|
| Sat, 18 Jul 2026 06:52:39 GMT |
[Support] — Exploiting LFI, Weak Session Cookies, and Command... |
local-file-inclusion |
|
|
| Sun, 14 Jun 2026 13:21:02 GMT |
Subdomain Enumeration: A Core Technique Every Bug Hunter Must Mas... |
subdomain-enumeration |
|
|
| Sat, 09 May 2026 01:31:00 GMT |
Your Server Is Showing Everything It Shouldn’t -The Apache Dire... |
directory-listing |
|
|
| Sun, 19 Jul 2026 09:38:45 GMT |
How Shodan Maps the Entire Internet — And What That Means for Y... |
shodan |
|
|
| Mon, 07 Sep 2026 14:27:48 GMT |
NNS Travel web challenge - NNS CTF 2026 |
pentesting |
|
|
| Thu, 06 Aug 2026 12:49:45 GMT |
The Lesser-Known Art of Recon Using Favicon Hashes |
recon |
|
|
| Mon, 24 Aug 2026 14:39:57 GMT |
IPMEye: Exfiltrating IPMI credentials in Zabbix |
exploit |
|
|
| Sat, 06 Jun 2026 07:18:44 GMT |
Update: The Ending of My $500 Loss and Web Cache Poisoning Story. |
web-cache-poisoning |
|
|
| Wed, 19 Nov 2025 19:44:02 GMT |
The Pulse of Liquidity: How DorkFi’s Interest Rates Adapt in Re... |
dorks |
|
|
| Thu, 02 Apr 2026 18:59:50 GMT |
File Inclusion (LFI/RFI) — Extracting Sensitive Data from confi... |
file-inclusion |
|
|
| Wed, 02 Sep 2026 07:45:09 GMT |
CVE-2026-24031 Analysis — Dovecot SQL-Based Authentication Bypa... |
cve |
|
|
| Mon, 07 Sep 2026 16:35:41 GMT |
Kerentanan Kritis MikroTik RouterOS yang Sedang Dieksploitasi |
bugs |
|
|
| Thu, 13 Aug 2026 16:25:49 GMT |
Bypassing Amazon Bedrock Guardrails Content Filters |
security-research |
|
|
| Mon, 07 Sep 2026 20:58:12 GMT |
Ranking of the best roll-up door companies in New York |
security |
|
|
| Wed, 19 Aug 2026 09:12:53 GMT |
A Langfuse SSRF, default ClickHouse credentials, and a novel erro... |
ssrf |
|
|
| Thu, 20 Aug 2026 21:41:44 GMT |
How a Single Unauthenticated Endpoint Let Me Reach NASA's Interna... |
bugcrowd |
|
|
| Fri, 21 Aug 2026 10:25:46 GMT |
15 Entry-Level Cybersecurity Jobs and the Skills They Actually Re... |
bug-bounty-hunter |
|
|
| Mon, 07 Sep 2026 10:29:47 GMT |
The 5-Phase Pentesting Model, Explained Simply |
pentest |
|
|
| Fri, 28 Aug 2026 18:58:57 GMT |
Web Shell Upload via Extension Blacklist Bypass |
file-upload |
|
|
| Tue, 30 Jun 2026 12:11:15 GMT |
El toro de Wall Street ya está en WhiteBIT |
bounty-program |
|
|
| Wed, 17 Jun 2026 08:46:50 GMT |
Amazon Prime for Young Adults — Why Every College Soccer Fan Ne... |
bounties |
|
|
| Mon, 07 Sep 2026 16:19:37 GMT |
MikroTrick Exploit: Hackers Are Hijacking MikroTik Routers |
hacking, information-security |
|
|
| Mon, 07 Sep 2026 21:01:01 GMT |
I Used My Boundaries as a Weapon Against My Husband, and I Didnâ€... |
vulnerability |
|
|
| Fri, 04 Sep 2026 13:05:53 GMT |
I Read The Policies So You Don’t Have To; HackerOne (Vulnerabil... |
hackerone |
|
|
| Tue, 25 Aug 2026 06:53:57 GMT |
From Google Maps to Gemini: How One API Key Created a $375,000 Cl... |
api-key |
|
|
| Fri, 07 Aug 2026 08:34:38 GMT |
I Gave an Open-Weight Model a Linux Kernel Bug(CVE-2026–64564). |
cyber-sec |
|
|
| Mon, 07 Sep 2026 18:43:38 GMT |
Best Smart Security Camera for Homes & Businesses (2026 Guide) |
security |
|
|
| Mon, 17 Aug 2026 14:37:52 GMT |
How I Found an Authentication Bypass in a Target’s MCP Server |
bugcrowd |
|
|
| Wed, 17 Dec 2025 09:57:30 GMT |
The Mother Lode: Hacking with GitHub Dorking |
github-dorking |
|
|
| Mon, 11 Dec 2023 18:17:01 GMT |
Exploiting a Log Poisoning. |
log-poisoning |
|
|
| Sat, 18 Jul 2026 15:13:45 GMT |
PentesterLab — Recon 10: Visual Reconnaissance |
recon |
|
|
| Mon, 07 Sep 2026 09:15:31 GMT |
What Does a Penetration Test Actually Find? A Practical Guide for... |
penetration-testing |
|
|
| Tue, 18 Aug 2026 09:49:57 GMT |
The Hidden Internet in Plain Sight: 9 Google Operators That Fuel ... |
google-dork |
|
|
| Tue, 01 Sep 2026 20:11:03 GMT |
From Bug to Schema: Exploring Error-Based SQL Injection on an Aut... |
vulnerability-disclosure |
|
|
| Mon, 13 Jul 2026 11:04:30 GMT |
Cache Poisoning: From Cache Hits to Bounty |
web-cache-poisoning |
|
|
| Thu, 27 Aug 2026 03:01:02 GMT |
The Best-Paying Bug in Bounty Isn’t the One Everyone Hunts |
rce |
|
|
| Sun, 26 Jul 2026 17:59:41 GMT |
Recruit — THM Writeup |
local-file-inclusion |
|
|
| Mon, 06 Jul 2026 11:47:49 GMT |
UK Business Directory: Strategic Visibility for Local Market Succ... |
directory-listing |
|
|
| Mon, 07 Sep 2026 21:06:01 GMT |
I Played Love Like a Chess Game — and Still Lost Everything |
vulnerability |
|
|
| Wed, 17 Jun 2026 19:02:16 GMT |
TryHackMe Lo-Fi Writeup |
lfi |
|
|
| Tue, 11 Aug 2026 08:57:49 GMT |
DEV DIARIES — TRY HACK ME WALKTHROUGH: |
subdomain-enumeration |
|
|
| Sat, 30 May 2026 18:19:20 GMT |
Admin Dashboard Accessible Without Authentication |
vulnerability-disclosure |
|
|
| Mon, 31 Aug 2026 12:33:36 GMT |
A Senior Pentester’ Approach to IDOR and Authorization Testing |
idor, pentest |
|
|
| Sun, 09 Aug 2026 11:37:48 GMT |
XSS (Çapraz Site Komut Dosyası Çalıştırma) |
xss-vulnerability |
|
|
| Thu, 28 May 2026 07:15:06 GMT |
¡Únete y hazte con uno de los más de 400 premios! |
bounty-program |
|
|
| Mon, 06 Apr 2026 21:45:53 GMT |
Cookie(Çerez) Türleri ve Pentest Açısından Önemi |
web-pentest |
|
|
| Mon, 07 Sep 2026 14:55:55 GMT |
— |
bug-bounty, hacking |
|
|
| Sun, 21 Jun 2026 00:45:05 GMT |
Atdork |
google-dorking, google-dork |
|
|
| Sat, 06 Dec 2025 23:06:15 GMT |
Big News from DorkFi — PreFi Rewards Drop + Contest Live! |
dorks |
|
|
| Tue, 21 Apr 2026 15:05:26 GMT |
Web Security Series #17 — Exploiting Local File Inclusion (LFI)... |
file-inclusion |
|
|
| Fri, 31 Jul 2026 15:09:57 GMT |
blind XSS vulnerability that performs actions on behalf of the ad... |
xss-vulnerability |
|
|
| Thu, 30 Jul 2026 11:31:01 GMT |
Shodan & Censys — The Search Engines for Hackers |
shodan |
|
|
| Sun, 16 Aug 2026 09:23:56 GMT |
Critical Security Assessment of Veilo Privacy Protocol Smart Cont... |
bounties |
|
|
| Wed, 22 Jul 2026 09:53:31 GMT |
XSS vs CSRF vs SSRF: Why Do So Many People Get Confused? |
cross-site-scripting |
|
|
| Thu, 20 Nov 2025 17:16:47 GMT |
The Health Factor: How DorkFi Keeps Your Position Safe |
dorks |
|
|
| Sun, 30 Aug 2026 13:51:25 GMT |
How I Bypassed an SSRF Filter Using an IPv6 Address |
ssrf |
|
|
| Wed, 05 Aug 2026 22:36:52 GMT |
The Hollow Shell | Hacker Holidays Day 10 | TryHackMe Writeup |
local-file-inclusion |
|
|
| Sat, 05 Sep 2026 19:29:07 GMT |
A Silent Response Is Not a Safe System |
application-security |
|
|
| Tue, 28 Jul 2026 23:12:01 GMT |
I Found a Major SaaS Platform’s Internal Credentials by Calling... |
information-disclosure |
|
|
| Wed, 12 Aug 2026 03:16:00 GMT |
Three CVEs in Activepieces: The Sandbox Was Real. The Code Just D... |
vulnerability-disclosure |
|
|
| Sat, 05 Sep 2026 19:24:02 GMT |
TryHackMe Cyber Security 101 | Search Skills |
shodan |
|
|
| Thu, 03 Sep 2026 06:55:50 GMT |
My Autonomous Hunt Harness Found a Reflected XSS That Could Expos... |
xss-attack |
|
|
| Wed, 14 Jan 2026 15:20:07 GMT |
How Default Server Configurations Expose Critical Information. |
vdp |
|
|
| Sat, 04 Jul 2026 14:50:11 GMT |
Dosya Sistemine Sızış: Directory Traversal ve LFI Zafiyetlerin... |
local-file-inclusion |
|
|
| Mon, 31 Aug 2026 21:40:18 GMT |
My Autonomous Bug Hunting Harness Found an SSRF Filter Bypass Hid... |
ssrf |
|
|
| Sun, 30 Aug 2026 12:35:09 GMT |
Nmap for finding your initial clues |
pentest |
|
|
| Mon, 07 Sep 2026 18:08:02 GMT |
Jump — TryHackMe Linux Privilege Escalation Write-up |
cyber-security-awareness |
|
|
| Sat, 05 Sep 2026 14:26:41 GMT |
� 6 IDORs, 1 Root Cause: The “Duplicate� Saga of a FinTech ... |
idor |
|
|
| Tue, 05 Dec 2023 07:54:40 GMT |
LFI via SMTP log poisoning |
log-poisoning |
|
|
| Wed, 02 Sep 2026 06:37:50 GMT |
Unminify — picoCTF Write-up | Sometimes the Flag Is Right in F... |
information-disclosure |
|
|
| Fri, 14 Aug 2026 15:50:43 GMT |
Bug Hunting #1 |
pentest |
|
|
| Fri, 04 Sep 2026 00:29:27 GMT |
Metabase Password Reset SQL Injection (CVE-2026–72898): Deep Di... |
cve |
|
|
| Sun, 23 Aug 2026 04:12:56 GMT |
The TLS Proxy Trap: Risks of Client-Side API Keys |
api-key |
|
|
| Sun, 06 Sep 2026 13:19:44 GMT |
Winning a Race Against a Wallet: How I Turned a $50 Top-Up Into $... |
bug-bounty-tips |
|
|
| Mon, 31 Aug 2026 22:41:58 GMT |
CVE-2026–56705: Pre-Auth RCE in Adminer’s MSSQL Driver |
exploit |
|
|
| Thu, 03 Sep 2026 11:34:27 GMT |
TryHackMe: Lo-Fi Walkthrough |
local-file-inclusion |
|
|
| Fri, 06 Jun 2025 15:47:21 GMT |
��♂� GitHub Dorking for Bug Bounty: Hackers' Hidden Playg... |
github-dorking |
|
|
| Wed, 02 Sep 2026 22:35:50 GMT |
Uncovering a High-Severity Blind SSRF via WordPress XML-RPC |
ssrf |
|
|
| Thu, 27 Aug 2026 11:26:12 GMT |
Profile Picture Upload UI with Cropping, Preview and Instant Feed... |
file-upload |
|
|
| Mon, 07 Sep 2026 10:31:03 GMT |
Looking Back at CISA’s Urgent Warning for the Critical Citrix N... |
cve |
|
|
| Mon, 07 Sep 2026 03:01:02 GMT |
AI Agents Went From 13% to 90% in One Year. Every “Safe� Bug ... |
web-security |
|
|
| Thu, 28 May 2026 16:33:00 GMT |
CONTENT DISCOVERY-TRYHACKME WALKTHROUGH |
google-dorking |
|
|
| Tue, 24 Mar 2026 17:48:00 GMT |
The Ultimate Bug Bounty Course: From Zero to Advanced Hacker 1 |
bug-bounty-hunting |
|
|
| Sat, 14 Mar 2026 18:06:12 GMT |
Web Security Series #3 — Discovering Credentials Using Cluster ... |
bug-bounty-hunting |
|
|
| Mon, 07 Sep 2026 17:42:37 GMT |
Cyber Security: The Invisible Battle Behind Every Click What if ... |
hacking, information-security |
|
|
| Mon, 24 Aug 2026 12:51:33 GMT |
Hack Smarter — Casino Lab Solution | InferiorAK |
remote-code-execution |
|
|
| Tue, 04 Aug 2026 11:14:01 GMT |
Building an AI-Powered Container Scan Analyzer into our CI/CD Pip... |
vulnerability-scanning |
|
|
| Mon, 13 Jul 2026 08:48:39 GMT |
Censys 是什麼？和 Shodan 常被拿來比較，兩者實際å·... |
censys |
|
|
| Fri, 31 Jul 2026 06:27:02 GMT |
Cross-Site Scripting (XSS) Explained: The Complete Guide Every We... |
cross-site-scripting, xss-vulnerability |
|
|
| Thu, 06 Aug 2026 20:28:38 GMT |
Kali CTF Writeup: Uncovering “the unbroken shelf� (OSINT) |
google-dork |
|
|
| Thu, 27 Aug 2026 08:28:45 GMT |
When Should You Add File Uploads to an Online Form? |
file-upload |
|
|
| Fri, 28 Aug 2026 16:31:01 GMT |
Protecting Your Infrastructure: How to Hide Your Servers from Sho... |
shodan |
|
|
| Sun, 21 Jun 2026 18:31:00 GMT |
Can You Build a Career on Bugcrowd? I’m Going to Test It. (Day ... |
bounty-program |
|
|
| Mon, 22 Jun 2026 04:22:38 GMT |
Subdomain Takeover: A Complete Guide from Beginner to Advanced |
subdomain-takeover |
|
|
| Fri, 04 Sep 2026 05:51:44 GMT |
Designing Mobile Applications Around Real-World User Expectations |
application-security |
|
|
| Tue, 01 Sep 2026 08:10:36 GMT |
One Researcher Earned $811,000 Hunting Bugs for Google |
hackerone, bug-bounty-hunter |
|
|
| Wed, 26 Aug 2026 11:31:01 GMT |
Web Cache Poisoning: One Response, Every Victim |
bugbounty-writeup |
|
|
| Sat, 05 Sep 2026 17:24:43 GMT |
Everyone Chains SSTI to RCE. I Chained It to Account Takeover. |
bug-bounty-writeup |
|
|
| Mon, 07 Sep 2026 14:09:41 GMT |
Why a Single LLM Agent Can’t Read Your Contracts (And What Can) |
cyber-security-awareness |
|
|
| Fri, 04 Sep 2026 02:44:00 GMT |
It’s been too long |
bugs |
|
|
| Tue, 19 May 2026 14:13:53 GMT |
Guildford to Box Hill |
dorking |
|
|
| Fri, 17 Jul 2026 16:56:29 GMT |
CTF: Archangel TryhackMe Room |
local-file-inclusion |
|
|
| Sat, 22 Aug 2026 17:14:56 GMT |
What the Internet Sees |
censys |
|
|
| Mon, 24 Aug 2026 14:21:54 GMT |
Power Cookie — picoCTF Writeup |
bugbounty-writeup |
|
|
| Mon, 27 Jul 2026 20:47:05 GMT |
TryHackMe XSS Introduction Walkthrough |
cross-site-scripting |
|
|
| Wed, 01 Jul 2026 05:23:05 GMT |
Broken Authentication Vulnerability That Allowed Unauthorized Use... |
bugcrowd |
|
|
| Mon, 17 Aug 2026 07:53:28 GMT |
I Got Tired of Opening Burp to Test One Request. So I Built My Wa... |
bug-bounty-hunter |
|
|
| Thu, 13 Aug 2026 16:58:39 GMT |
How I Systematically Find XSS Bugs in Bug Bounty Programs (Step-b... |
bug-bounty-hunter |
|
|
| Thu, 13 Mar 2025 18:09:56 GMT |
How I Found Sensitive Information using Github Dorks in Bug Bount... |
github-dorking |
|
|
| Sun, 23 Feb 2025 11:17:25 GMT |
$1000-$10k worth Leaks via Github Secret Dorks |
github-dorking |
|
|
| Thu, 03 Sep 2026 13:56:30 GMT |
File Upload Vulnerabilities |
file-upload |
|
|
| Mon, 07 Sep 2026 13:05:20 GMT |
The Malware That Hides From Everyone Except Your Customers: Insid... |
web-security |
|
|
| Sat, 01 Aug 2026 00:58:24 GMT |
How I Found and Claimed a Subdomain Takeover on cewe.kruidvat.nl |
subdomain-takeover |
|
|
| Sun, 30 Aug 2026 16:15:50 GMT |
Upload ke Cloudinary Sukses, tapi Gambarnya Ilang Pas Dibuka Lagi... |
file-upload |
|
|
| Tue, 04 Aug 2026 11:31:01 GMT |
Finding Exposed Cloud Keys & Secrets |
bugcrowd |
|
|
| Sat, 25 Jul 2026 04:56:38 GMT |
Writeup VDP CVE-2026–42031 (CKAN SQLI & Autherization bypass) d... |
vdp |
|
|
| Mon, 29 Jun 2026 06:52:04 GMT |
My First Cross-Site Scripting (XSS) Vulnerability: A Journey of P... |
xss-bypass |
|
|
| Mon, 07 Sep 2026 09:46:08 GMT |
Symmetric vs Asymmetric Encryption, Explained Through Food Delive... |
infosec |
|
|
| Fri, 21 Aug 2026 17:46:04 GMT |
API Security: The Vulnerabilities Most Developers Miss |
bugbounty-writeup |
|
|
| Thu, 20 Nov 2025 09:45:04 GMT |
Timber Doors in Surrey: Style, Durability, and Value Explained |
dorking |
|
|
| Tue, 07 Jul 2026 02:35:59 GMT |
Search Skills: Mastering Cyber Security Research & OSINT |
shodan |
|
|
| Mon, 07 Sep 2026 15:57:42 GMT |
LLM, RAG, MCP y agentes de IA: una guÃa sencilla para entender c... |
hacking, ethical-hacking |
|
|
| Thu, 20 Aug 2026 06:03:54 GMT |
SQL Injection to RCE: Understanding the Attack Chain |
rce |
|
|
| Wed, 18 Mar 2026 10:03:26 GMT |
Web Security Series #7 — Exploiting Blind SQL Injection via Ses... |
bug-bounty-hunting |
|
|
| Fri, 26 Jun 2026 06:46:44 GMT |
How Google Dorking Can Streamline Your SEO Research Process |
google-dorking |
|
|
| Thu, 23 Jul 2026 05:03:54 GMT |
Vulnerability Scanning Tools | TryHackMe (THM) |
vulnerability-scanning |
|
|
| Mon, 17 Aug 2026 08:02:30 GMT |
From Pentest Report to Closed Ticket: What Happens to a Vulnerabi... |
pentest |
|
|
| Fri, 04 Sep 2026 18:13:53 GMT |
CVE-2026–85769 — Heap Out-of-Bounds Read in libtpms State... |
cve |
|
|
| Tue, 11 Nov 2025 16:43:14 GMT |
Beyond Google: Navigating the Hidden Internet with Shodan and Cen... |
censys |
|
|
| Tue, 25 Aug 2026 06:31:01 GMT |
AI attacks outpace defensive security measures of Bitcoin project... |
exploit |
|
|
| Fri, 14 Aug 2026 17:01:43 GMT |
Dorks that could get you a good bounty in 2026 |
google-dorking |
|
|
| Fri, 17 Apr 2026 15:39:41 GMT |
Bug Bounty 2026: Why the “End of the World� is Actually a $50... |
bounties |
|
|
| Sat, 15 Aug 2026 09:28:44 GMT |
Together AI’dan Api Key Nasıl Alınır (2026) |
api-key |
|
|
| Mon, 07 Sep 2026 20:33:33 GMT |
SQL Server 2022'de Unutulan SA Parolasını Kurtarma: Windows Adm... |
security |
|
|
| Sat, 08 Aug 2026 16:08:26 GMT |
CRTA - da Aplicação Web ao Domain Admin |
recon |
|
|
| Mon, 31 Aug 2026 07:36:33 GMT |
Getting Started with Claude Code using Agent Router (Beginner’s... |
api-key |
|
|
| Sat, 08 Aug 2026 07:28:13 GMT |
CVE-2026–34486 Analysis — Apache Tomcat EncryptInterceptor By... |
exploit |
|
|
| Fri, 28 Jun 2024 14:51:14 GMT |
X-Forwarded HTTP header-ləri : Qısa izah |
log-poisoning |
|
|
| Mon, 17 Aug 2026 01:19:05 GMT |
The Evolution of Authentication: From Passwords to Refresh Tokens... |
api-key |
|
|
| Sun, 19 Jul 2026 21:01:10 GMT |
The Secret Was Just One Folder Away |
file-inclusion |
|
|
| Thu, 20 Aug 2026 14:57:04 GMT |
Remote code execution via web shell upload — PortSwigger Academ... |
remote-code-execution |
|
|
| Wed, 13 May 2026 07:37:16 GMT |
How to Find Subdomains Using Shodan and the Favicon Hash Trick |
subdomain-enumeration |
|
|
| Sun, 06 Sep 2026 07:36:01 GMT |
How One OIDC URL Turned Into a Much Bigger SSRF |
bug-bounty-writeup |
|
|
| Wed, 03 Jun 2026 15:20:33 GMT |
Most Businesses in Costa Rica Are Easier to Find Than You Think, ... |
directory-listing |
|
|
| Tue, 25 Aug 2026 16:17:10 GMT |
C2 Hunting |
shodan |
|
|
| Sun, 06 Sep 2026 20:41:01 GMT |
True, “true�, 1 or [] — Does Your API Treat Them the Same... |
bug-bounty-tips |
|
|
| Tue, 25 Aug 2026 06:56:31 GMT |
Mark Up Student Work in the Browser: A Coursework Portal Built on... |
file-upload |
|
|
| Mon, 08 Jun 2026 10:33:04 GMT |
How a Routine XSS Hunt Led to an Unexpected Database Information ... |
vulnerability-disclosure |
|
|
| Sun, 23 Aug 2026 15:08:26 GMT |
You Can’t Become a Great Bug Bounty Hunter Without Understandin... |
bugbounty-writeup |
|
|
| Mon, 22 Jun 2026 06:51:54 GMT |
Find exposed sensitive data in AWS, Google Cloud, and other platf... |
dorks |
|
|
| Mon, 07 Sep 2026 19:51:50 GMT |
Looking for a free, anonymous intranet‑penetration tool? |
pentesting |
|
|
| Thu, 03 Sep 2026 13:08:52 GMT |
Web Application Security in 2026: Everything You Need to Know Bef... |
bugbounty-writeup |
|
|
| Sat, 22 Aug 2026 01:45:40 GMT |
The bug that survived three years of code review |
vulnerability-disclosure |
|
|
| Sun, 30 Aug 2026 17:50:20 GMT |
Attack and Security Series: Episode 6 |
rce |
|
|
| Sun, 22 Oct 2023 19:57:30 GMT |
Performing a Log Poisoning Attack |
log-poisoning |
|
|
| Fri, 12 Jun 2026 11:04:39 GMT |
Why Your Subdomain Takeover Reports Keep Getting Closed as N/A (A... |
subdomain-takeover |
|
|
| Sun, 30 Aug 2026 07:09:05 GMT |
Google Dorking for Cybersecurity: A Beginner’s Guide to Practic... |
google-dorking |
|
|
| Wed, 06 May 2026 11:36:01 GMT |
Google Dorking |
dorking |
|
|
| Sun, 21 Jun 2026 18:54:02 GMT |
From Hydra to RCE: Breaking Down TryHackMe’s Support Machine |
web-pentest |
|
|
| Sun, 06 Sep 2026 19:27:12 GMT |
SQLi2RCE: my small research � |
rce |
|
|
| Mon, 31 Aug 2026 09:09:40 GMT |
Who Let the DAGs Out? When Your Orchestrator Plays the Wrong Tune |
security-research |
|
|
| Thu, 13 Aug 2026 13:01:04 GMT |
¡Hazte de nivel VIP 2 enseguida! |
bounty-program |
|
|
| Thu, 02 Jul 2026 16:02:56 GMT |
Strengthening Web3 Trust with Blockchain Incident Response & Fore... |
bug-bounty-program |
|
|
| Mon, 07 Sep 2026 15:44:03 GMT |
Breaking Down a Lecturer’s Dummy Pokemon App: A Penetration Tes... |
penetration-testing |
|
|
| Mon, 07 Sep 2026 12:32:45 GMT |
Starting My Cybersecurity Journey |
cyber-security-awareness |
|
|
| Fri, 07 Aug 2026 10:51:46 GMT |
DOM XSS using web messages |
xss-vulnerability |
|
|
| Sun, 30 Aug 2026 15:25:58 GMT |
The Subdomain Recon Chain: subfinder → httpx → dnsx |
recon |
|
|
| Mon, 07 Sep 2026 16:00:28 GMT |
CVE-2026–11991 Case Study FlowForms <= 1.1.1 |
vulnerability, idor, cve |
|
|
| Mon, 07 Sep 2026 17:33:10 GMT |
AI Security Learning Journal — Day 05 |
information-security |
|
|
| Wed, 24 Jun 2026 11:31:00 GMT |
CSRF Explained Like You’re Five |
bugcrowd |
|
|
| Thu, 30 Jul 2026 15:39:49 GMT |
HACKING JULY DAY 25: VULN-BANK EXPLOITATION #9 |
xss-vulnerability |
|
|
| Mon, 07 Sep 2026 08:49:28 GMT |
AWS Security Agent, explained: what it does, how to deploy it, an... |
penetration-testing |
|
|
| Fri, 17 Jul 2026 00:49:39 GMT |
Malware Analysis and Domain Investigation: Following the Trail fr... |
cybersecurity-tools |
|
|
| Sun, 19 Jul 2026 19:30:09 GMT |
Login Security Testing Checklist |
bug-bounty-hunting |
|
|
| Fri, 10 Nov 2023 03:38:01 GMT |
Apache error.log advanced Log poisoning RCE |
log-poisoning |
|
|
| Tue, 02 Jun 2026 19:48:50 GMT |
From False Positive to Hall of Fame: Exploiting Web Cache Poisoni... |
web-cache-poisoning |
|
|
| Mon, 07 Sep 2026 20:08:25 GMT |
The WordPress Hack That Stole 90% of an Affiliate Marketer’s Pa... |
security |
|
|
| Mon, 24 Aug 2026 19:17:26 GMT |
Metasploit Scanning and Exploitation: From Reconnaissance to Expl... |
vulnerability-scanning |
|
|
| Mon, 07 Sep 2026 21:29:56 GMT |
Stop Handing Out Permanent AWS Access: Build a Safer Alternative |
security |
|
|