| Thu, 05 Nov 2026 17:16:01 GMT |
Grace Is a Costume Until Someone Tries to Take It Off |
vulnerability |
Yes |
Yes |
| Thu, 05 Nov 2026 17:06:57 GMT |
RSA-2048 Once Needed 20 Million Qubits. Now the Estimate Is Below... |
security |
Yes |
Yes |
| Thu, 05 Nov 2026 19:15:53 GMT |
Broken Access Control #2: I Flipped One Cookie From “false†t... |
bug-bounty, hacking, bug-bounty-writeup, ethical-hacking |
Yes |
Yes |
| Thu, 05 Nov 2026 17:57:57 GMT |
TCP/IP: The Language of the Internet |
information-technology |
Yes |
Yes |
| Thu, 05 Nov 2026 21:25:32 GMT |
Meta Introduces AI Avatar Video Chat for US Users Through Muse |
information-technology |
Yes |
Yes |
| Thu, 05 Nov 2026 18:44:20 GMT |
How Do You Upload Files Through the SharePoint, OneDrive, Box and... |
file-upload |
Yes |
Yes |
| Thu, 05 Nov 2026 18:53:14 GMT |
The Password Was in the JSON: A WordPress REST API Access-Control... |
bug-bounty, security-research |
Yes |
Yes |
| Thu, 05 Nov 2026 20:45:33 GMT |
The Day the Fridges Were Hacked |
cybersecurity |
Yes |
Yes |
| Thu, 05 Nov 2026 20:33:55 GMT |
The Jail That Gave Its Prisoner a Staff Badge: Escaping WordPress... |
bug-bounty, xss-attack |
Yes |
Yes |
| Thu, 05 Nov 2026 21:02:33 GMT |
Your Firewall Let the Attack Through. Here’s What Could Have St... |
cybersecurity, information-security, ethical-hacking |
Yes |
Yes |
| Thu, 05 Nov 2026 20:49:28 GMT |
What a DDoS Attack Taught Me About Reading Clouds |
cybersecurity |
Yes |
Yes |
| Thu, 05 Nov 2026 18:22:14 GMT |
Four nines is a budget, not a grade |
information-technology |
Yes |
Yes |
| Thu, 05 Nov 2026 20:42:01 GMT |
Industrial Automation, Piping and Tubing Suppliers in Europe: The... |
information-technology |
Yes |
Yes |
| Thu, 05 Nov 2026 20:21:14 GMT |
How to Route Suspicious Documents to a Review Queue in Python |
application-security |
Yes |
Yes |
| Thu, 05 Nov 2026 17:01:02 GMT |
Your Synology NAS Can Be Encrypted Without Anyone Logging In |
information-security, cyber-security-awareness |
Yes |
Yes |
| Thu, 05 Nov 2026 21:21:52 GMT |
Is Your WordPress Website Really Secure? Get a Free Security Chec... |
cybersecurity, information-security |
Yes |
Yes |
| Thu, 05 Nov 2026 21:44:51 GMT |
OpenAI Launches New Cybersecurity Model to Fight Growing Digital ... |
information-technology |
Yes |
Yes |
| Thu, 05 Nov 2026 17:11:01 GMT |
The Renderer That Trusted Its Own Output: Stored XSS Through a Ma... |
bug-bounty, security, hacking, bug-bounty-tips |
Yes |
Yes |
| Thu, 05 Nov 2026 21:25:34 GMT |
OmniWatch — Complete Attack Walkthrough |
cybersecurity, hacking |
Yes |
Yes |
| Thu, 05 Nov 2026 20:03:22 GMT |
The Bouncer Who Only Read IPv4: SSRF in WordPress Playground’s ... |
bug-bounty, ssrf, security-research |
Yes |
Yes |
| Thu, 05 Nov 2026 21:25:19 GMT |
Agentic goes purple: AI-driven detection validation with the Atom... |
cybersecurity |
Yes |
Yes |
| Thu, 05 Nov 2026 17:39:43 GMT |
Investing in Crypto is Harder Than Ever, But Still Worth It |
hacking |
Yes |
Yes |
| Thu, 05 Nov 2026 21:35:26 GMT |
Meta Warns Election Backlash Against Data Centers Could Make AI E... |
information-technology |
Yes |
Yes |
| Thu, 05 Nov 2026 21:42:26 GMT |
Internet Tales— From Arpanet to BBS |
information-technology |
Yes |
Yes |
| Thu, 05 Nov 2026 17:51:37 GMT |
Russia’s Spies Hacked a Ukrainian Gas Company’s Website to St... |
hacking |
Yes |
Yes |
| Thu, 05 Nov 2026 21:53:14 GMT |
OpenAI Could Be Ready for an IPO in 2027, Says Greg Brockman |
information-technology |
Yes |
Yes |
| Thu, 05 Nov 2026 20:36:20 GMT |
WTF Happens When Your Team Uses Muse or Grok |
cybersecurity |
Yes |
Yes |
| Thu, 05 Nov 2026 16:44:22 GMT |
11 Essential AI Data Governance Tools to Secure & Scale in 2026 |
security |
Yes |
Yes |
| Thu, 05 Nov 2026 17:11:51 GMT |
MCP Gateway Security Tools Comparison for Enterprise (2026) |
security |
Yes |
Yes |
| Thu, 05 Nov 2026 18:43:52 GMT |
The Paradox of Strong AI |
security |
Yes |
Yes |
| Thu, 05 Nov 2026 17:23:25 GMT |
Agent Memory Architecture: Short- & Long-Term Governed Access |
security |
Yes |
Yes |
| Thu, 05 Nov 2026 16:28:18 GMT |
The Full Article Copy to Publish on Medium |
ethical-hacking |
Yes |
Yes |
| Thu, 05 Nov 2026 20:47:39 GMT |
The day FakeGit’s C2 wallet turned into a MetaMask smart accoun... |
cybersecurity |
Yes |
Yes |
| Thu, 05 Nov 2026 19:01:07 GMT |
ClickFix: Kullanıcıyı Komut Çalıştırmaya İkna Eden Saldı... |
cyber-security-awareness |
Yes |
Yes |
| Thu, 05 Nov 2026 17:39:28 GMT |
5 commandes pour tester un port sous Windows et Linux |
security |
Yes |
Yes |
| Thu, 05 Nov 2026 21:21:46 GMT |
How to Update a Production VPS Without Turning Routine Maintenanc... |
cybersecurity |
Yes |
Yes |
| Thu, 05 Nov 2026 19:49:40 GMT |
Selecting a model for local agentic AI inference in SecOps on NVI... |
security |
Yes |
Yes |
| Thu, 05 Nov 2026 19:30:43 GMT |
Setting Up a Single-Site LAMP Server on Ubuntu with HTTPS and SSH... |
information-technology |
Yes |
Yes |
| Thu, 05 Nov 2026 20:37:31 GMT |
Privacy Has a Supply Chain |
information-security |
Yes |
Yes |
| Thu, 05 Nov 2026 17:54:54 GMT |
Cybersecurity for Beginners: A Simple Guide to Get You Started |
information-security |
Yes |
Yes |
| Thu, 05 Nov 2026 17:59:12 GMT |
Active Directory Basics: A Beginner’s Guide to Windows Domains,... |
penetration-testing |
Yes |
Yes |
| Thu, 05 Nov 2026 17:30:38 GMT |
“Why Companies Should Invest in Cybersecurity Training.†|
cyber-security-awareness |
Yes |
Yes |
| Thu, 05 Nov 2026 19:37:44 GMT |
Implementing an EMR Across Diverse Sites |
information-technology |
Yes |
Yes |
| Thu, 05 Nov 2026 09:47:28 GMT |
From Fragmented Banking Systems to a Connected Digital Platform |
application-security |
|
Yes |
| Thu, 05 Nov 2026 15:26:01 GMT |
My Friend Was the Knife. Now I Understand Why I Pick Up Mine. |
vulnerability |
|
Yes |
| Thu, 05 Nov 2026 15:58:59 GMT |
One Buffer Overflow, One Misconfigured Sudo Rule: Breaking Into H... |
hacking, information-security |
|
Yes |
| Thu, 05 Nov 2026 13:09:41 GMT |
Understanding the WannaCry Ransomware Attack: A Hands-On Simulati... |
penetration-testing, ethical-hacking |
|
Yes |
| Thu, 05 Nov 2026 04:50:26 GMT |
Web Gauntlet ~ CyLab Security Academy CTF Write-up | SQL Injecti... |
web-security |
|
Yes |
| Thu, 05 Nov 2026 13:00:26 GMT |
Your Releases Ship Weekly. Why Does Your Pentest Run Once a Year? |
penetration-testing, information-security, application-security |
|
Yes |
| Thu, 05 Nov 2026 09:10:45 GMT |
From Digital Footprints to Digital Defence: How Students Can Buil... |
ethical-hacking |
|
Yes |
| Thu, 05 Nov 2026 00:02:38 GMT |
What You Should Know Before Clicking “Allow†To AI |
cyber-security-awareness |
|
Yes |
| Thu, 05 Nov 2026 11:49:41 GMT |
GhostMap Android Flaw Explained: The Boot Loop Bug |
vulnerability |
|
Yes |
| Thu, 05 Nov 2026 07:01:06 GMT |
Publishing an App to the Internet? Why a Reverse Proxy or WAF in ... |
web-security, application-security |
|
Yes |
| Thu, 05 Nov 2026 13:29:09 GMT |
Missing Content-Security-Policy: What It Means and What to Check ... |
web-security |
|
Yes |
| Thu, 05 Nov 2026 16:22:14 GMT |
Hacked WordPress site: clean it in place, or rebuild it? |
web-security |
|
Yes |
| Thu, 05 Nov 2026 16:17:00 GMT |
The $6.3 Billion Binance Breach: How One Cyberattack Shook the Cr... |
security |
|
Yes |
| Thu, 05 Nov 2026 13:25:57 GMT |
Rot / Toss |
vulnerability |
|
Yes |
| Thu, 05 Nov 2026 15:29:45 GMT |
From Vulnerability to Disclosure: How to Score, Report, and Respo... |
vulnerability, hacking, information-security |
|
Yes |
| Thu, 05 Nov 2026 13:14:59 GMT |
Purple Team(cyberSecurity ) Home Lab Set-up |
penetration-testing |
|
Yes |
| Thu, 05 Nov 2026 15:50:05 GMT |
Threat Analysis: ARTEX AI Penetration Testing Framework |
hacking |
|
Yes |
| Thu, 05 Nov 2026 14:21:01 GMT |
He Lived Next to Me and Never Asked a Real Question |
vulnerability |
|
Yes |
| Thu, 05 Nov 2026 10:11:01 GMT |
Smarter Scams, Cloned Voices, Automated Attacks: Is Your Business... |
cyber-security-awareness |
|
Yes |
| Thu, 05 Nov 2026 09:06:05 GMT |
From Policies to Public Conversations |
cyber-security-awareness |
|
Yes |
| Thu, 05 Nov 2026 14:27:10 GMT |
How to Audit Drupal Commerce Orders for Fraud |
web-security |
|
Yes |
| Thu, 05 Nov 2026 04:16:37 GMT |
AI-assisted pentest at assistsec at our company |
pentesting |
|
Yes |
| Thu, 05 Nov 2026 12:20:01 GMT |
Security Requirements Every Software Project Brief Should Include |
application-security |
|
Yes |
| Thu, 05 Nov 2026 00:46:14 GMT |
7 Vulnerability Patterns in AI-Generated Code Every Enterprise Te... |
application-security |
|
Yes |
| Thu, 05 Nov 2026 10:20:39 GMT |
Dense in Depth: Rethinking Security When Vulns Are Everywhere |
vulnerability |
|
Yes |
| Thu, 05 Nov 2026 11:45:36 GMT |
TryHackMe Operating System Security: Walkthrough |
infosec |
|
Yes |
| Thu, 05 Nov 2026 14:19:20 GMT |
Google Dorking in Action: Discovering Publicly Indexed University... |
web-security, ethical-hacking, google-dorking |
|
Yes |
| Thu, 05 Nov 2026 03:51:08 GMT |
Claude Didn’t Hack Georgia. It Asked for the Token the Website ... |
infosec |
|
Yes |
| Thu, 05 Nov 2026 16:08:54 GMT |
A Cache Hit Still Needs an Authorization Check |
security |
|
Yes |
| Thu, 05 Nov 2026 15:18:43 GMT |
A Guest Account, a Reversible Cookie, and a Linux Box Called Venu... |
information-security, ethical-hacking |
|
Yes |
| Thu, 05 Nov 2026 13:37:42 GMT |
The Five-Check JWT Chain: How I Break Token Auth Before I Touch t... |
bug-bounty |
|
Yes |
| Thu, 05 Nov 2026 12:34:06 GMT |
PortSwigger lab: Broken brute-force protection, IP block |
bug-bounty, penetration-testing, web-security |
|
Yes |
| Thu, 05 Nov 2026 15:13:47 GMT |
My First Vulnerability Assessment: Exploring DVWA, SQL Injection ... |
vulnerability, ethical-hacking |
|
Yes |
| Thu, 05 Nov 2026 14:45:32 GMT |
How to Handle Uploads, Images, Video and AI-Generated Files: 8 Gi... |
file-upload |
|
Yes |
| Thu, 05 Nov 2026 10:44:47 GMT |
eWPTXv3: The Complete Study Blueprint for INE's Toughest Web App ... |
web-security, pentesting |
|
Yes |
| Thu, 05 Nov 2026 11:52:28 GMT |
Beating an IDS at Its Own Game: What I Learned Scanning Quietly |
penetration-testing, infosec |
|
Yes |
| Thu, 05 Nov 2026 09:01:03 GMT |
What testing a smart home camera taught me about the gadgets in y... |
pentesting |
|
Yes |
| Thu, 05 Nov 2026 07:01:06 GMT |
Exposer une application sur Internet : pourquoi un reverse proxy ... |
web-security, application-security |
|
Yes |
| Thu, 05 Nov 2026 10:59:35 GMT |
IDOR: The Vulnerability That Hides Behind a Simple Request |
bugs |
|
Yes |
| Thu, 05 Nov 2026 14:36:12 GMT |
20 Identity Security Mistakes That Lead to Account Takeover: Lear... |
bug-bounty, hacking, ethical-hacking |
|
Yes |
| Thu, 05 Nov 2026 02:48:10 GMT |
Secure Code Review Explained: How VAPT Teams Do It, Manual and Au... |
bug-bounty-tips |
|
Yes |
| Thu, 05 Nov 2026 12:57:03 GMT |
Whiterose-THM |
bug-bounty, web-security |
|
Yes |
| Thu, 05 Nov 2026 14:26:29 GMT |
How Indonesian Bugs Taught Me About Nostalgia |
bugs |
|
Yes |
| Thu, 05 Nov 2026 05:41:01 GMT |
I Mastered the Signs of Love, But Only Learned to Read Myself |
vulnerability |
|
Yes |
| Thu, 05 Nov 2026 14:01:23 GMT |
Remediation After VAPT: How to Prioritise and Fix Security Findin... |
vapt |
|
Yes |
| Thu, 05 Nov 2026 15:38:13 GMT |
Remote Code Execution via Polyglot Web Shell Upload |
penetration-testing |
|
Yes |
| Thu, 05 Nov 2026 11:53:04 GMT |
Securing the CI/CD Pipeline: Defending Against Artifact Poisoning... |
cyber-security-awareness |
|
Yes |
| Thu, 05 Nov 2026 01:45:32 GMT |
Think Your Password Is Strong? A Brute-Force Attack Might Prove Y... |
cyber-security-awareness |
|
Yes |
| Thu, 05 Nov 2026 12:54:14 GMT |
How a Broken Email Confirmation Flow Took Over Any Shopify Store |
bug-bounty, bug-bounty-tips, hackerone, bug-bounty-writeup, bug-bounty-hunter |
|
Yes |
| Thu, 05 Nov 2026 15:23:36 GMT |
Insomnia: an autonomous AI red team that runs a pentest from reco... |
penetration-testing, information-security |
|
Yes |
| Thu, 05 Nov 2026 14:03:06 GMT |
Is cybersecurity training still worth paying for as we head into ... |
penetration-testing, ethical-hacking |
|
Yes |
| Thu, 05 Nov 2026 12:59:24 GMT |
Why Iron Dust Rules Magnetic Particle Testing (And Why It’s Oka... |
penetration-testing |
|
Yes |
| Thu, 05 Nov 2026 12:23:51 GMT |
Your Startup Has a Pentest Report. Is That Enough for Investors? |
pentesting |
|
Yes |
| Thu, 05 Nov 2026 15:47:06 GMT |
The AI That Remembers Everything Might Be the One You Should Trus... |
cyber-security-awareness |
|
Yes |
| Thu, 05 Nov 2026 10:59:45 GMT |
Vulnerability Discovery Became Manufacturing : 948 Root Exploits ... |
application-security |
|
Yes |
| Thu, 05 Nov 2026 15:29:55 GMT |
Your AI Agent Can Be Hacked Without Anyone Touching Your Server |
hacking |
|
Yes |
| Thu, 05 Nov 2026 13:16:01 GMT |
Fix the Right 1%: KEV-First Vulnerability Management for Small Se... |
infosec |
|
Yes |
| Thu, 05 Nov 2026 14:31:01 GMT |
The Silent SIM Swap: How Attackers Hijack Your Number and Drain B... |
cyber-security-awareness |
|
Yes |
| Fri, 09 Oct 2026 08:59:48 GMT |
List of all Popular XSS Payloads |
cross-site-scripting |
|
|
| Thu, 04 Dec 2025 04:45:36 GMT |
What is Google Dorking? |
dorking |
|
|
| Sun, 23 Aug 2026 19:39:11 GMT |
The vulnerability was real. The attack was not. |
vulnerability-disclosure |
|
|
| Tue, 15 Sep 2026 12:01:02 GMT |
I Built a Recon Pipeline That Maps a Target Before I Touch It |
recon |
|
|
| Sat, 26 Sep 2026 05:56:36 GMT |
From File Preview to Server-Side File Read: Testing DuckDB SQL Ex... |
local-file-inclusion |
|
|
| Wed, 19 Nov 2025 19:44:02 GMT |
The Pulse of Liquidity: How DorkFi’s Interest Rates Adapt in Re... |
dorks |
|
|
| Tue, 06 Oct 2026 18:31:01 GMT |
Top 20 curl Commands Every Hacker Should Know. |
cybersecurity-tools |
|
|
| Wed, 04 Nov 2026 05:19:51 GMT |
From PHP Source Code Disclosure to Privilege Escalation: Morpheus... |
pentesting |
|
|
| Thu, 17 Sep 2026 14:14:38 GMT |
XSS Finally Explained in a Way That Made Sense to Me |
cross-site-scripting |
|
|
| Fri, 16 Oct 2026 06:28:19 GMT |
DORK TOOLS ARE DEAD. OR ARE THEY? |
google-dork |
|
|
| Wed, 25 Feb 2026 01:47:45 GMT |
How I Found a Path Traversal in the Rancher Dashboard via HAR Rep... |
web-pentest |
|
|
| Thu, 29 Oct 2026 01:53:54 GMT |
PHP2Shell: Two Critical PHP Vulnerabilities That Could Turn a Web... |
remote-code-execution |
|
|
| Mon, 26 Oct 2026 02:50:04 GMT |
Dokumentasi Pengujian Cross-Site Scripting (XSS) Pada Sistem Info... |
xss-vulnerability |
|
|
| Fri, 30 Oct 2026 11:14:51 GMT |
How to Upload and Download Files in Node.js Using Express & Multe... |
file-upload |
|
|
| Thu, 15 Oct 2026 10:32:27 GMT |
How to Build a More Connected Digital Workspace in 2026 |
file-upload |
|
|
| Mon, 31 Aug 2026 11:57:29 GMT |
Why Is an API Key Not the Same as Delegated Authority for an AI A... |
bounties |
|
|
| Mon, 02 Nov 2026 12:12:50 GMT |
My Problem With Buggery |
bugs |
|
|
| Thu, 02 Jul 2026 16:02:56 GMT |
Strengthening Web3 Trust with Blockchain Incident Response & Fore... |
bug-bounty-program |
|
|
| Sun, 21 Jun 2026 18:54:02 GMT |
From Hydra to RCE: Breaking Down TryHackMe’s Support Machine |
web-pentest |
|
|
| Thu, 09 Jul 2026 23:38:38 GMT |
AtDork 1.3.9.6? 180,000 Dorks free open source |
dorks |
|
|
| Mon, 07 Sep 2026 13:31:02 GMT |
Building GhostShell: A Modern Python & Flask Security Suite for A... |
vulnerability-scanning |
|
|
| Sun, 04 Oct 2026 23:05:46 GMT |
Web Cache Poisoning: Understanding, Detecting, and Exploiting Cac... |
web-cache-poisoning |
|
|
| Mon, 13 Jul 2026 11:04:30 GMT |
Cache Poisoning: From Cache Hits to Bounty |
web-cache-poisoning |
|
|
| Sun, 01 Nov 2026 09:12:59 GMT |
Black October at the End of a Gravel Road |
bugs |
|
|
| Fri, 30 Oct 2026 14:09:38 GMT |
XSS Hunting Methodology: My Complete Recon to Validation Workflow... |
xss-attack, xss-vulnerability |
|
|
| Thu, 20 Nov 2025 17:16:47 GMT |
The Health Factor: How DorkFi Keeps Your Position Safe |
dorks |
|
|
| Wed, 09 Sep 2026 05:19:56 GMT |
What Is Continuous Security Validation?A Complete Guide |
vulnerability-scanning |
|
|
| Wed, 09 Sep 2026 11:01:53 GMT |
Wild Bounty Showdown PG Soft di HORE889: Pola Cascade |
bounties |
|
|
| Sun, 25 Oct 2026 02:39:06 GMT |
PHP2Shell: Two Critical PHP RCE Flaws (Know the Adversary, Patch,... |
security-research |
|
|
| Sun, 21 Sep 2025 07:02:30 GMT |
Affordable but Vulnerable? The Dark Side of CMORE HMI |
censys |
|
|
| Tue, 03 Nov 2026 20:58:39 GMT |
Executing Shellcode in an Isolated vCPU |
pentesting |
|
|
| Wed, 30 Sep 2026 11:04:54 GMT |
When Deleting the Default Workspace Made the Entire Account Unusa... |
bugcrowd |
|
|
| Sun, 06 Sep 2026 18:34:22 GMT |
Exposed Django Debug Mode on a Development Subdomain |
information-disclosure |
|
|
| Thu, 03 Sep 2026 11:34:27 GMT |
TryHackMe: Lo-Fi Walkthrough |
local-file-inclusion |
|
|
| Tue, 03 Nov 2026 23:04:25 GMT |
How I Built an AI-Powered Bug Bounty Agent That Actually Respects... |
pentesting |
|
|
| Sun, 25 Oct 2026 02:57:42 GMT |
Designing an MCP-Based Security Lab for Agentic Security Research |
security-research |
|
|
| Sat, 18 Jul 2026 19:00:12 GMT |
XSS Bypass — The Hackers Labs |
xss-bypass |
|
|
| Wed, 09 Sep 2026 12:12:33 GMT |
Getting Started with OSINT: My First Steps with Google Dorking |
google-dork |
|
|
| Thu, 03 Sep 2026 22:40:43 GMT |
How a Simple Dork Led to a Critical 10.0 CVSS |
vulnerability-disclosure |
|
|
| Thu, 13 Aug 2026 16:11:01 GMT |
Vulnerability Scanning vs Penetration Testing: A Straight Answer,... |
vulnerability-scanning |
|
|
| Sat, 26 Sep 2026 17:31:02 GMT |
I Took Over the Infrastructure. The CDN Still Said No. |
subdomain-takeover |
|
|
| Thu, 08 Oct 2026 21:21:45 GMT |
Dari Vulnerability Jadi Proof-of-Concept: Mengapa Dunia Keamanan ... |
cyber-sec |
|
|
| Mon, 02 Nov 2026 15:46:04 GMT |
One link, all your private chats: how AI assistants get turned ag... |
bug-bounty-hunter |
|
|
| Sat, 31 Oct 2026 11:04:48 GMT |
I Changed One Number in a URL and Read Another Customer’s PAN, ... |
idor |
|
|
| Tue, 25 Aug 2026 09:49:53 GMT |
B2B Directory Listing Sites: Top 10 for 2026 |
directory-listing |
|
|
| Tue, 13 Oct 2026 08:31:09 GMT |
Des pirates chauffent des réfrigérateurs de supermarchés à 50... |
shodan |
|
|
| Tue, 22 Apr 2025 10:38:20 GMT |
Trump’s Tariffs Cut Out Censys — ZoomEye Steps In Strong! |
zoomeye |
|
|
| Tue, 03 Nov 2026 20:24:28 GMT |
HTB — Delivery |
pentesting |
|
|
| Sat, 24 Oct 2026 19:26:22 GMT |
Cracking CVE-2026-109618: OffSec Lab Walkthrough to RCE via PHP 8... |
remote-code-execution |
|
|
| Sun, 20 Sep 2026 16:10:55 GMT |
How I Found an Undocumented GraphQL Endpoint Leaking Home Address... |
bounties |
|
|
| Mon, 02 Nov 2026 11:15:34 GMT |
เริ่มต้นà¸à¸±à¸š Functional Programming |
bugs |
|
|
| Fri, 30 Oct 2026 06:16:12 GMT |
Oh My OpenCode & OMOP: Ketika AI Agent Harness Mengubah Cara Pent... |
cyber-sec |
|
|
| Wed, 21 Oct 2026 22:44:38 GMT |
TryHackMe Free: Intro to Logs |
cyber-sec |
|
|
| Sun, 13 Sep 2026 00:59:52 GMT |
Shodan en CLI |
shodan |
|
|
| Fri, 30 Oct 2026 08:12:15 GMT |
Bug Bounty Case Study: How a Public ID Exposed Private Account Em... |
bugbounty-writeup |
|
|
| Sun, 22 Oct 2023 19:57:30 GMT |
Performing a Log Poisoning Attack |
log-poisoning |
|
|
| Mon, 02 Nov 2026 01:44:15 GMT |
PHP2Shell Security Lab: Setting Up a Safe Vulnerability Testing E... |
cve |
|
|
| Sun, 30 Aug 2026 07:09:05 GMT |
Google Dorking for Cybersecurity: A Beginner’s Guide to Practic... |
google-dorking |
|
|
| Mon, 02 Nov 2026 21:47:29 GMT |
Cross-Site Scripting (XSS) via Malicious GIF Cyshield CTF 2026 |
xss-attack, bugbounty-writeup |
|
|
| Wed, 29 Jul 2026 06:41:51 GMT |
What is Web Cache Poisoning? |
web-cache-poisoning |
|
|
| Wed, 09 Sep 2026 09:11:00 GMT |
The Ultimate 2026 Shodan Cheat Sheet Guide |
shodan |
|
|
| Thu, 14 Aug 2025 10:54:38 GMT |
Unlocking the Hidden Power of Search Engines |
censys |
|
|
| Sat, 10 Oct 2026 04:55:05 GMT |
Your Attack Surface Is Telling a Story. Are You Paying Attention? |
recon |
|
|
| Thu, 24 Sep 2026 15:05:11 GMT |
Introducing QR Jacking: When Your Branded QR Codes Aren’t Yours |
subdomain-takeover |
|
|
| Wed, 28 Oct 2026 07:51:26 GMT |
VAPT for APIs: The Security Checks Traditional Application Testin... |
vapt |
|
|
| Wed, 04 Nov 2026 09:43:46 GMT |
How Business Directory Listings Help You Get Found Online |
directory-listing |
|
|
| Mon, 02 Nov 2026 20:50:47 GMT |
Pardus-ETAP eta-register CVE-2026–92886 Kodlu Zafiyet |
cve |
|
|
| Wed, 28 Oct 2026 16:25:18 GMT |
HTB OnlyHacks Walkthrough |
idor |
|
|
| Tue, 03 Nov 2026 15:35:22 GMT |
One-Click Cookie Theft via Deep Link XSS (But Deep Links Are Out ... |
bug-bounty-writeup |
|
|
| Fri, 23 Oct 2026 12:11:01 GMT |
Stop Uploading Files Through Your Node.js Server. Use Presigned U... |
file-upload |
|
|
| Wed, 14 Oct 2026 00:41:31 GMT |
What Is Shodan And How Does It Work? |
shodan |
|
|
| Wed, 14 Oct 2026 03:09:14 GMT |
Stop Paying for API Keys? The Real Win Is Making LLM Cost an Engi... |
api-key |
|
|
| Sat, 31 Oct 2026 20:46:38 GMT |
Google Is Your Free APT: How I Find API Keys Without Hacking Anyt... |
google-dork |
|
|
| Mon, 03 Aug 2026 09:22:06 GMT |
Server-2: Vulnerable OnlyPhone— VulnerabilityWeb Walkthrough (4... |
directory-listing |
|
|
| Sat, 08 Aug 2026 12:57:41 GMT |
Bir XSS Turu: Temelden Az Bilinene (9 farklı senaryo) |
xss-bypass |
|
|
| Sun, 21 Jun 2026 00:45:05 GMT |
Atdork |
google-dorking |
|
|
| Sat, 31 Oct 2026 12:25:02 GMT |
JSON.stringify Is Not a Bouncer: How a Docs Page Ran My JavaScrip... |
xss-attack |
|
|
| Wed, 15 Jul 2026 12:56:40 GMT |
I Just Wanted a Cold Coffee. Instead I Found a Master Key to a Ve... |
vdp |
|
|
| Mon, 02 Nov 2026 08:14:49 GMT |
15 Cybersecurity Tools Every Business Should Know About |
cybersecurity-tools |
|
|
| Thu, 20 Aug 2026 09:31:01 GMT |
Blind SSRF Without Callbacks: How I Used Timing to Prove Kubernet... |
cyber-sec |
|
|
| Tue, 27 Oct 2026 14:02:29 GMT |
Title: The $0.00 |
hackerone |
|
|
| Tue, 18 Nov 2025 08:33:41 GMT |
A Chain of Vulnerabilities Leading to Critical Information Disclo... |
bug-bounty-program |
|
|
| Sat, 24 Oct 2026 00:08:57 GMT |
PHP2Shell: Critical PHP Vulnerabilities Expose Websites to Remote... |
remote-code-execution |
|
|
| Tue, 03 Nov 2026 15:59:25 GMT |
Intent Redirection to One-Click Account Takeover (But It’s a Du... |
bug-bounty-writeup |
|
|
| Tue, 15 Jul 2025 12:15:58 GMT |
“Secure†OPC UA Setups Are Being Hacked — Here’s Why |
censys |
|
|
| Thu, 01 Oct 2026 16:45:45 GMT |
411 Directory Listing Service |
directory-listing |
|
|
| Mon, 26 Oct 2026 14:01:05 GMT |
Rotating a Leaked AI Key Is Too Late. Cap It Before It Leaks. |
api-key |
|
|
| Wed, 01 Jul 2026 11:46:00 GMT |
Convierte acciones sencillas en recompensas reales |
bounty-program |
|
|
| Tue, 30 Jun 2026 12:11:15 GMT |
El toro de Wall Street ya está en WhiteBIT |
bounty-program |
|
|
| Fri, 07 Aug 2026 08:34:38 GMT |
I Gave an Open-Weight Model a Linux Kernel Bug(CVE-2026–64564). |
cyber-sec |
|
|
| Sun, 15 Feb 2026 09:26:13 GMT |
TryHackMe Walkthrough -Subdomain Enumeration |
subdomain-enumeration |
|
|
| Mon, 02 Nov 2026 06:37:12 GMT |
Understanding and Preventing SSRF in Spring Boot 4.1 with RestCli... |
ssrf |
|
|
| Mon, 21 Sep 2026 03:01:06 GMT |
Tần suất Pentest tối ưu: Bà i toán chiến lược giữa... |
pentest |
|
|
| Thu, 28 May 2026 15:59:28 GMT |
File Inclusion Vulnerability Assessment |
file-inclusion |
|
|
| Mon, 05 Oct 2026 09:17:12 GMT |
SEARCH SKILLS — TRY HACK ME WALKTHROUGH: |
shodan |
|
|
| Fri, 26 Jun 2026 06:46:44 GMT |
How Google Dorking Can Streamline Your SEO Research Process |
google-dorking |
|
|
| Tue, 29 Sep 2026 16:06:01 GMT |
Critical Security Alert: Unauthenticated LFI to RCE in Visual Com... |
lfi |
|
|
| Sun, 20 Sep 2026 07:17:19 GMT |
Grep for Hackers: The One Command-Line Tool You’ll Use More Tha... |
cybersecurity-tools |
|
|
| Wed, 04 Nov 2026 17:06:02 GMT |
The Allowlist That Trusted a Name Instead of an Address: Bypassin... |
bug-bounty-tips |
|
|
| Sat, 31 Oct 2026 11:10:27 GMT |
Is Cross-Site Scripting Still a Risk for Indian Websites? |
cross-site-scripting |
|
|
| Thu, 29 Oct 2026 15:46:18 GMT |
Pavel Thought robots.txt Was a Lock. It Was a Welcome Mat. |
hackerone |
|
|
| Sat, 30 May 2026 11:25:12 GMT |
Cross-Site Scripting (XSS) via Client-Side Filter Bypass |
xss-bypass |
|
|
| Sat, 20 Dec 2025 18:21:40 GMT |
N0aziXss SubSpectre: Advanced Subdomain Discovery with Intelligen... |
subdomain-enumeration |
|
|
| Tue, 20 Oct 2026 11:31:01 GMT |
The Bug Hiding In A Feature Nobody Uses Anymore |
ssrf |
|
|
| Wed, 14 Oct 2026 09:12:23 GMT |
One Random Search Led Me to Exposed PDFs During a Bug Bounty Hunt |
recon |
|
|
| Sat, 24 Oct 2026 15:51:22 GMT |
Cisco FXOS: Discovering an Unauthenticated Version Disclosure Thr... |
pentest |
|
|
| Wed, 23 Sep 2026 04:12:24 GMT |
Báo cáo Pentest chất lượng: Ranh giới giữa tuân thủ... |
pentest |
|
|
| Thu, 18 Jun 2026 11:52:47 GMT |
¿Usas Intercambio? |
bounty-program |
|
|
| Mon, 27 Jul 2026 19:32:54 GMT |
Brew Bank Official Writeup | EYCC CTF |
lfi |
|
|
| Tue, 27 Oct 2026 17:37:02 GMT |
I Bypassed a Whitelist-Based SSRF Filter PortSwigger Expert Lab W... |
ssrf |
|
|
| Thu, 13 Aug 2026 13:01:04 GMT |
¡Hazte de nivel VIP 2 enseguida! |
bounty-program |
|
|
| Wed, 28 Oct 2026 12:34:05 GMT |
Six SVG sanitizers failed Gareth Heyes’s browser tests |
cross-site-scripting |
|
|
| Wed, 28 Oct 2026 11:31:50 GMT |
How Stale Reset Tokens Led to Full Account Takeover (Even After C... |
hackerone, bugcrowd |
|
|
| Sun, 25 Oct 2026 18:08:00 GMT |
The Age of AI Attacks Has Arrived! |
bug-bounty-program |
|
|
| Tue, 10 Feb 2026 23:04:46 GMT |
Effective Dorking Tools |
dorking |
|
|
| Thu, 29 Oct 2026 20:01:41 GMT |
One Payload, Four Targets: How a 10% Confidence Scanner Hit Unloc... |
xss-attack |
|
|
| Mon, 02 Nov 2026 09:30:56 GMT |
Les failles critiques PHP2Shell dorénavant exploitées |
rce |
|
|
| Mon, 18 May 2026 00:04:46 GMT |
GOOGLE DORK Ä°LE BÄ°LGÄ°YÄ° HIZLI VE DOÄžRU BULMA |
github-dorking |
|
|
| Mon, 18 May 2026 07:01:05 GMT |
InterLink Migration Vote Begins | Active Bounty Season 3 |
bounty-program |
|
|
| Thu, 11 Jun 2026 05:26:16 GMT |
START HERE, MANIFESTO |
dorks |
|
|
| Wed, 07 Oct 2026 02:28:49 GMT |
HTML Injections Part 1: Adding a Vulnerable Code |
cross-site-scripting |
|
|
| Tue, 18 Nov 2025 18:12:40 GMT |
Dork Labs Awarded AWS Activate Startup Grant |
dorks |
|
|
| Mon, 29 Jun 2026 01:03:39 GMT |
Belajar tentang File Inclusion dalam Penetration Testing |
file-inclusion |
|
|
| Mon, 24 Aug 2026 03:01:03 GMT |
Subdomain Takeover: When a Dead DNS Record Becomes Your Entry Poi... |
subdomain-takeover |
|
|
| Mon, 02 Nov 2026 06:28:35 GMT |
Exploiting PHP 8.4: From Out-of-Memory Conditions to Remote Code ... |
rce |
|
|
| Thu, 17 Sep 2026 17:42:29 GMT |
Nmap Learning Series — Part 3: OS and Service Version Scanning |
cybersecurity-tools |
|
|
| Wed, 02 Sep 2026 06:37:50 GMT |
Unminify — picoCTF Write-up | Sometimes the Flag Is Right in F... |
information-disclosure |
|
|
| Sun, 01 Nov 2026 20:46:12 GMT |
Searching smarter: a guide to name-based OSINT |
google-dork |
|
|
| Thu, 27 Mar 2025 23:46:11 GMT |
Make Break and Betrayal |
web-pentest |
|
|
| Sat, 31 Oct 2026 11:26:01 GMT |
Mr-Robot: 1 — VulnHub Walkthrough | My First Hands-on CTF Expe... |
vapt |
|
|
| Thu, 28 May 2026 07:15:06 GMT |
¡Únete y hazte con uno de los más de 400 premios! |
bounty-program |
|
|
| Fri, 25 Sep 2026 10:17:51 GMT |
The Key That Isn’t Stored: Ketika Cacat Produksi Chip Jadi Kunc... |
cyber-sec |
|
|
| Thu, 07 May 2026 06:41:01 GMT |
Github Dorking |
dorking, github-dorking |
|
|
| Tue, 03 Nov 2026 16:00:51 GMT |
Lab6: Host validation bypass via connection state attack |
ssrf |
|
|
| Sat, 06 Dec 2025 23:06:15 GMT |
Big News from DorkFi — PreFi Rewards Drop + Contest Live! |
dorks |
|
|
| Thu, 22 Oct 2026 03:16:01 GMT |
How to Test Multipart File Uploads & Cloud Storage CDN in React W... |
file-upload |
|
|
| Mon, 11 Dec 2023 18:17:01 GMT |
Exploiting a Log Poisoning. |
log-poisoning |
|
|
| Wed, 04 Nov 2026 20:13:46 GMT |
1 AI Subscription made me 100k$ in 2 months |
bug-bounty-tips |
|
|
| Mon, 02 Nov 2026 15:46:01 GMT |
Java Concurrency in Low-Level Design Interviews: The Bugs You Nee... |
bugs |
|
|
| Thu, 29 Oct 2026 16:31:01 GMT |
PHP2Shell |
rce |
|
|
| Mon, 08 Jun 2026 09:48:02 GMT |
XSS WAF Bypass: The Ultimate Deep Dive |
xss-bypass |
|
|
| Sat, 24 Oct 2026 13:05:48 GMT |
Railway’s Environment Variable Breach: What to Rotate First, an... |
api-key |
|
|
| Thu, 24 Sep 2026 12:41:28 GMT |
Anatomy of Predatory Fintech: Bedah Teknis di Balik Teror Pinjol ... |
cyber-sec |
|
|
| Sat, 25 Jul 2026 04:56:38 GMT |
Writeup VDP CVE-2026–42031 (CKAN SQLI & Autherization bypass) d... |
vdp |
|
|
| Mon, 25 May 2026 14:19:37 GMT |
Look at this, we created this |
bounties |
|
|
| Thu, 29 Oct 2026 10:09:39 GMT |
SSRF Vulnerability on Major Gaming Company |
bugbounty-writeup |
|
|
| Thu, 08 Oct 2026 13:34:27 GMT |
How One Student Earned $1,030 From an Adobe Bug: A Bugitrix Case ... |
bug-bounty-hunter |
|
|
| Fri, 30 Oct 2026 13:12:51 GMT |
IDOR in Munshi: Changing a Purchase Inquiry ID Exposed Another Us... |
idor |
|
|
| Sun, 25 Oct 2026 23:08:09 GMT |
Non sempre piango |
idor |
|
|
| Sun, 01 Nov 2026 10:32:30 GMT |
PHP2Shell-Everything you need to know |
rce |
|
|
| Tue, 18 Nov 2025 13:26:47 GMT |
GitHub Dorking: The Hunter’s Guide to Finding Secrets in Public... |
github-dorking |
|
|
| Mon, 02 Nov 2026 06:40:04 GMT |
Lab4: Routing-based SSRF |
ssrf |
|
|
| Wed, 01 Jul 2026 11:02:50 GMT |
Bounty Hacker |
bounties |
|
|
| Mon, 02 Nov 2026 07:01:02 GMT |
Patch What’s Actually Being Exploited: Prioritizing With the CI... |
cve |
|
|
| Sun, 06 Sep 2026 01:53:14 GMT |
How to Configure Subfinder with API Keys for Better Passive Subdo... |
recon |
|
|
| Wed, 30 Sep 2026 15:26:01 GMT |
The Perfect Phishing âš”ï¸ |
bugcrowd |
|
|
| Wed, 14 Oct 2026 14:29:39 GMT |
Mungkin Memang Bukan Jalannya(?) |
vdp |
|
|
| Sun, 19 Jul 2026 21:01:10 GMT |
The Secret Was Just One Folder Away |
file-inclusion |
|
|
| Fri, 02 Oct 2026 06:56:42 GMT |
Secret Supernovas | CSS CTF Semester 2 2026 Writeup |
information-disclosure |
|
|
| Sun, 13 Sep 2026 12:40:10 GMT |
Regex for Hackers: Using Regex for Recon & Broken Validation |
recon |
|
|
| Sun, 14 Dec 2025 06:37:06 GMT |
My Bug Bounty Diary |
subdomain-enumeration |
|
|
| Tue, 03 Nov 2026 11:09:20 GMT |
The Three-Request IDOR Method: How I Find Broken Access Control B... |
idor |
|
|
| Sat, 25 Oct 2025 12:23:25 GMT |
How to find leaks on GitHub as a beginner. Logic is main key |
github-dorking |
|
|
| Mon, 02 Nov 2026 08:46:11 GMT |
How two forward slashes let anyone use a government website as a ... |
bugs |
|
|
| Thu, 08 Oct 2026 20:00:01 GMT |
AI Script Kiddies Broke Bug Bounty Hunting |
bug-bounty-hunter |
|
|
| Sun, 17 May 2026 02:56:19 GMT |
The 3 Bug Hunting Habits That Made Me Go From $0 to $5k (And None... |
bug-bounty-program |
|
|
| Tue, 27 Oct 2026 03:01:03 GMT |
IDOR Hunting Techniques Every Bug Bounty Hunter Should Know | by... |
idor |
|
|
| Wed, 16 Jul 2025 12:07:42 GMT |
Hackers Love This 1979 Protocol (Because It Can’t Defend Itself... |
censys |
|
|
| Fri, 21 Aug 2026 03:27:08 GMT |
Forgotten CNAME? So Was Your Subdomain | Featurebase as an Under... |
subdomain-takeover |
|
|
| Sun, 11 Oct 2026 18:33:33 GMT |
Recreating the DeepSeek Database Leak Wiz Research Found |
information-disclosure |
|
|
| Sat, 31 Oct 2026 03:48:58 GMT |
Exploit PHP2Shell (CVE-2026–109618 & 109619): From Out-of-Memor... |
exploit |
|
|
| Sat, 24 Oct 2026 11:53:31 GMT |
Testing PHP2Shell in Local PHP Lab |
exploit |
|
|
| Sat, 10 Oct 2026 05:32:48 GMT |
VAPTOR AI Expands Compliance Mapping with POPIA and SOC 2 Framewo... |
pentest |
|
|
| Fri, 30 Oct 2026 11:10:41 GMT |
Stored XSS in Munshi: A Purchase Inquiry Message Could Rewrite th... |
xss-attack, xss-vulnerability |
|
|
| Sat, 19 Sep 2026 01:21:26 GMT |
What I learned From Managing Bug Bounty Program |
bug-bounty-program |
|
|
| Wed, 12 Feb 2025 22:46:35 GMT |
https://www.express.co.uk/life-style/property/2012927/cleaning-ch... |
web-pentest |
|
|
| Sat, 18 Jul 2026 06:52:39 GMT |
[Support] — Exploiting LFI, Weak Session Cookies, and Command... |
local-file-inclusion |
|
|
| Wed, 30 Sep 2026 05:57:37 GMT |
Step-by-Step Guide to Finding a Subdomain Takeover |
subdomain-takeover |
|
|
| Mon, 02 Nov 2026 05:59:33 GMT |
PortSwigger | Cross-Site Scripting Lab |
xss-attack |
|
|
| Wed, 28 Oct 2026 11:49:04 GMT |
XSS Explained: Prevention, Risks, and Types |
cross-site-scripting |
|
|
| Sun, 23 Aug 2026 11:07:57 GMT |
How I Found My First LLM Vulnerability and Escalated it to Admin ... |
vulnerability-disclosure |
|
|
| Sun, 14 Jun 2026 13:21:02 GMT |
Subdomain Enumeration: A Core Technique Every Bug Hunter Must Mas... |
subdomain-enumeration |
|
|
| Sun, 20 Sep 2026 06:34:49 GMT |
The Attack Chain Is the Deliverable, So Why Do Most Red Team Repo... |
pentest |
|
|
| Wed, 04 Nov 2026 12:27:27 GMT |
Understanding SQL Injection |
bug-bounty-tips |
|
|
| Thu, 13 Mar 2025 18:09:56 GMT |
How I Found Sensitive Information using Github Dorks in Bug Bount... |
github-dorking |
|
|
| Sun, 01 Nov 2026 07:35:07 GMT |
HackTheBox Cap Writeup |
idor |
|
|
| Fri, 01 Aug 2025 06:17:06 GMT |
15,000 Critical Systems Are Exposed — Thanks to This Outdat... |
censys |
|
|
| Sat, 24 Oct 2026 23:02:47 GMT |
TakeOver- TryHackMe room walkthrough |
subdomain-takeover |
|
|
| Sun, 01 Nov 2026 18:46:26 GMT |
A Shared ChatGPT Link Could Expose Private Chats |
bugs |
|
|
| Tue, 03 Nov 2026 12:00:13 GMT |
When a One-Time Password Works Twice: A Password Reset Logic Flaw |
hackerone |
|
|
| Sat, 31 Oct 2026 15:28:19 GMT |
HTB Lame: Writeup |
exploit |
|
|
| Tue, 22 Sep 2026 08:06:39 GMT |
Kok Bisa Sebuah Angka di Layar Permission Berujung Jadi Ancaman? |
cyber-sec |
|
|
| Wed, 30 Sep 2026 11:34:26 GMT |
XSS Gym Levels 1–20: A Context-Based Approach to Cross-Site Scr... |
cross-site-scripting |
|
|
| Tue, 11 Nov 2025 16:43:14 GMT |
Beyond Google: Navigating the Hidden Internet with Shodan and Cen... |
censys |
|
|
| Wed, 13 May 2026 07:37:16 GMT |
How to Find Subdomains Using Shodan and the Favicon Hash Trick |
subdomain-enumeration |
|
|
| Tue, 29 Sep 2026 10:37:26 GMT |
Practical SQL Injection Testing with sqlmap |
cybersecurity-tools |
|
|
| Thu, 13 Feb 2025 03:29:37 GMT |
ZoomEye Meets DeepSeek: AI-Powered Cyberspace Intelligence |
zoomeye |
|
|
| Sat, 20 Apr 2024 17:20:58 GMT |
TryHackMe — Brute Walkthrough | TheHiker |
log-poisoning |
|
|
| Thu, 29 Oct 2026 09:20:39 GMT |
Why I stopped managing separate API keys for every AI provider |
api-key |
|
|
| Tue, 18 Aug 2026 09:49:57 GMT |
The Hidden Internet in Plain Sight: 9 Google Operators That Fuel ... |
google-dork |
|
|
| Mon, 19 Oct 2026 14:26:12 GMT |
Bookstore — Tryhackme writeup |
lfi |
|
|
| Tue, 03 Nov 2026 04:46:01 GMT |
Hack The Box Module 07 — XSS |
xss-attack, cross-site-scripting, xss-vulnerability |
|
|
| Thu, 11 Sep 2025 22:20:14 GMT |
It’s Coming: DorkFi Delivers PreFi Rewards Surge |
dorking |
|
|
| Tue, 13 Oct 2026 13:58:34 GMT |
TryHackMe | Archangel — THM CTF |
lfi |
|
|
| Wed, 23 Sep 2026 13:29:31 GMT |
The Vulnerability Disappeared. Was It Actually Fixed? |
vulnerability-scanning |
|
|
| Sun, 04 Oct 2026 09:42:42 GMT |
How I Used Shodan Dorks to Find a Hidden Bug Bounty Program | by... |
shodan |
|
|
| Thu, 29 Oct 2026 10:02:16 GMT |
How VAPT&Cyber Audit Can Protect Enterprise in Abu Dhabi(2026 Gu... |
vapt |
|
|
| Thu, 08 Oct 2026 15:43:40 GMT |
Hunting archived URLs for information disclosure |
vdp, information-disclosure |
|
|
| Mon, 21 Sep 2026 07:59:14 GMT |
Installing Nmap on Windows: A Quick Start Guide |
recon |
|
|
| Thu, 29 Oct 2026 18:18:41 GMT |
HTB Armaxis Walkthrough |
local-file-inclusion |
|
|
| Wed, 30 Sep 2026 02:17:01 GMT |
OWASP ZAP REPORT WITH ADVANCED FILTERING BY TAGS AND SEVERITY |
pentest |
|
|
| Sun, 25 Oct 2026 09:15:00 GMT |
Container Containment is a Hypothesis: Empirical Verification in ... |
security-research |
|
|
| Sat, 31 Oct 2026 15:41:01 GMT |
How I Hunt for Information Disclosure Bugs: My Complete Bug Bount... |
information-disclosure |
|
|
| Wed, 21 Oct 2026 09:11:27 GMT |
How to Check a Bitcoin Bridge Before You Trust It |
exploit |
|
|
| Tue, 16 Jun 2026 13:11:36 GMT |
Understanding Web Cache Poisoning via Unkeyed Headers: A PortSwig... |
web-cache-poisoning |
|
|
| Wed, 17 Jun 2026 07:53:43 GMT |
Operation Liwanag: The Same Map a Chinese Intelligence Asset Drew... |
censys |
|
|
| Sun, 30 Aug 2026 15:25:58 GMT |
The Subdomain Recon Chain: subfinder → httpx → dnsx |
recon |
|
|
| Sun, 04 Oct 2026 20:35:37 GMT |
ACTION FI: SOMETHING DIFFERENT |
bounties |
|
|
| Wed, 04 Nov 2026 10:41:43 GMT |
Blood-Cat User Manual |
pentesting |
|
|
| Mon, 31 Aug 2026 12:33:36 GMT |
A Senior Pentester’ Approach to IDOR and Authorization Testing |
pentest |
|
|
| Wed, 16 Sep 2026 04:29:17 GMT |
​Stop sharing your profits with middlemen! |
directory-listing |
|
|
| Tue, 03 Nov 2026 09:51:52 GMT |
CVE-2026–109782: How a Missing File Extension Broke Firefox’s... |
cve |
|
|
| Sat, 22 Aug 2026 17:14:56 GMT |
What the Internet Sees |
censys |
|
|
| Tue, 23 Jun 2026 14:32:52 GMT |
Authentication Bypass & Information Disclosure in a Fortune 500 C... |
vdp |
|
|
| Sat, 03 Oct 2026 19:49:47 GMT |
AI-POWERED APPLICATION SECURITY WITH HCL APPSCAN |
cybersecurity-tools |
|
|
| Tue, 26 May 2026 23:44:37 GMT |
Intigriti May 2026 Challenge: XSS via Stored Payload & SCA Shield... |
xss-bypass |
|
|
| Sun, 21 Jun 2026 18:31:00 GMT |
Can You Build a Career on Bugcrowd? I’m Going to Test It. (Day ... |
bounty-program |
|
|
| Tue, 03 Nov 2026 23:01:02 GMT |
CVE-2026-103089: When a Document ID Exposes Another Patient’s R... |
idor |
|
|
| Mon, 18 May 2026 14:37:14 GMT |
File Inclusion - Challenge Part | TryHackMe Walkthrough |
file-inclusion |
|
|
| Mon, 10 Aug 2026 16:30:32 GMT |
Web Cache Deception vs Web Cache Poisoning: The Attack Paths Most... |
web-cache-poisoning |
|
|
| Sat, 25 Apr 2026 14:46:05 GMT |
File Inclusion— Skills Assesment (HTB) |
file-inclusion |
|
|
| Tue, 25 Aug 2026 02:21:01 GMT |
Recon Is the Whole Game — You’re Just Not Playing It Righ... |
google-dork |
|
|
| Wed, 21 Oct 2026 09:46:52 GMT |
PHP2Shell: Mitigating the Critical PHP RCE Before the Patch |
exploit |
|
|
| Mon, 26 Oct 2026 22:41:40 GMT |
From Medium Integrity to SYSTEM on Windows 11 |
security-research |
|
|
| Wed, 28 Oct 2026 13:01:04 GMT |
Rendering User-Supplied SVG Without Getting Burned |
xss-attack |
|
|
| Wed, 17 Dec 2025 09:57:30 GMT |
The Mother Lode: Hacking with GitHub Dorking |
github-dorking |
|
|
| Thu, 29 Oct 2026 14:40:55 GMT |
I found exposed personal data. Then things took a turn. |
security-research |
|
|
| Fri, 09 Oct 2026 13:48:27 GMT |
My First Passive Reconnaissance Using Shodan | My Application Se... |
shodan |
|
|
| Tue, 03 Nov 2026 01:38:13 GMT |
Network Security Testing Explained: What to Look For and How to T... |
bug-bounty-writeup |
|
|
| Mon, 26 Oct 2026 18:38:19 GMT |
PHP2Shell: Critical PHP RCE Vulnerabilities Explained |
remote-code-execution, security-research |
|
|
| Wed, 28 Oct 2026 15:16:24 GMT |
Recon with a Purpose: Turning Small Clues into Hidden Attack Surf... |
recon |
|
|
| Fri, 25 Sep 2026 10:04:49 GMT |
Basics of Subdomain Takeover |
subdomain-takeover |
|
|
| Mon, 12 Oct 2026 13:44:57 GMT |
Relay Sign-Up Done: Create a Token and Copy the Base URL |
api-key |
|
|
| Sun, 26 Jul 2026 17:59:41 GMT |
Recruit — THM Writeup |
local-file-inclusion |
|
|
| Tue, 22 Sep 2026 10:28:25 GMT |
Handle With Care — SkillBit CTF Writeup |
lfi |
|
|
| Mon, 02 Nov 2026 07:37:46 GMT |
Lab5: SSRF via flawed request parsing |
ssrf |
|
|
| Mon, 26 Oct 2026 18:02:45 GMT |
PHP2Shell: Two Vulnerabilities, One Serious Risk |
remote-code-execution |
|
|
| Tue, 03 Nov 2026 05:21:01 GMT |
GitLab’s Third Critical Patch in Six Weeks: What CVE-2026–110... |
xss-vulnerability |
|
|
| Fri, 25 Sep 2026 16:12:58 GMT |
Nmap Learning Series — Part 7: FIN, NULL & Xmas Scans |
recon |
|
|
| Mon, 06 Apr 2026 21:45:53 GMT |
Cookie(Çerez) Türleri ve Pentest Açısından Önemi |
web-pentest |
|
|
| Fri, 24 Jan 2025 09:34:52 GMT |
A new Holistic temple opening InLeeds |
web-pentest |
|
|
| Thu, 29 Oct 2026 09:13:13 GMT |
Building METIS: Inside a Modular Exploitation Framework in Python |
exploit |
|
|
| Wed, 21 Oct 2026 04:21:17 GMT |
A Practical Guide to Hunting Bugs in GraphQL When Introspection I... |
vulnerability-disclosure |
|
|
| Sat, 12 Sep 2026 15:56:01 GMT |
Why “Claimable†Doesn’t Always Mean “Exploitableâ€: A Su... |
subdomain-takeover |
|
|
| Wed, 17 Jun 2026 08:46:50 GMT |
Amazon Prime for Young Adults — Why Every College Soccer Fan Ne... |
bounties |
|
|
| Sun, 13 Sep 2026 17:41:55 GMT |
The Deal Is Broken: What Bugcrowd’s Triage Machine Actually Sel... |
vulnerability-disclosure |
|
|
| Tue, 29 Sep 2026 18:31:01 GMT |
curl for Hackers: A Practical Guide to HTTP, APIs & Web Testing |
cybersecurity-tools |
|
|
| Tue, 03 Nov 2026 12:16:22 GMT |
SSRF101: Sunucu Taraflı İstek Sahteciliği Nedir ve Nasıl İst... |
ssrf |
|
|
| Tue, 03 Nov 2026 18:15:35 GMT |
Seguridad de la IA practicando, esto es El Hacker Etico AI Labs |
pentesting |
|
|
| Wed, 04 Nov 2026 16:21:12 GMT |
I Found an Interesting DOM-Based XSS Issue in Contact Form | by ... |
cross-site-scripting |
|
|
| Mon, 02 Nov 2026 14:58:53 GMT |
I Found an Account Takeover Vulnerability Through Google Dorking |
google-dork |
|
|
| Sun, 13 Sep 2026 17:09:09 GMT |
Ghost Flight — PwnSec CTF 2026 |
google-dork |
|
|
| Thu, 03 Sep 2026 06:34:00 GMT |
WebDecode — picoCTF Write-up | Finding and Decoding a Hidden F... |
information-disclosure |
|
|
| Fri, 30 Oct 2026 06:31:17 GMT |
GraphQL IDOR: How a Missing Org Check Let Me Edit Another Tenantâ... |
idor |
|
|
| Sun, 01 Nov 2026 17:31:58 GMT |
Spooky Bug Tales: A Halloween special blog on seemingly paranorma... |
security-research |
|
|
| Sun, 16 Aug 2026 09:23:56 GMT |
Critical Security Assessment of Veilo Privacy Protocol Smart Cont... |
bounties |
|
|
| Wed, 04 Nov 2026 16:05:36 GMT |
Early Registration Now Open for “CVE/FIRST VulnCon 2027†on M... |
infosec |
|
|
| Tue, 13 Oct 2026 22:48:32 GMT |
Guidelines: Top Platforms to Find a Professional Hacker > Smatcho... |
bugcrowd |
|
|
| Fri, 30 Oct 2026 12:09:41 GMT |
Consensus exploit of 14 October 2026, chain restart, and what it ... |
exploit |
|
|
| Wed, 20 May 2026 20:47:25 GMT |
FINDING INFORMATION QUICKLY AND ACCURATELY WITH GOOGLE DORK |
github-dorking |
|
|
| Fri, 30 Oct 2026 19:17:43 GMT |
CVE-2026–92744 — Unauthenticated SYSTEM RCE in the Delinea Pr... |
exploit, rce |
|
|
| Fri, 09 Oct 2026 15:20:32 GMT |
Shodan —The Search Engine for Internet-Connected Devices (With ... |
shodan |
|
|
| Fri, 07 Aug 2026 09:37:42 GMT |
Are We Missing the #Ai Security Warning Signs? |
cyber-sec |
|
|
| Thu, 15 Oct 2026 12:45:30 GMT |
How Ecommerce Platforms Use APIs to Edit Images at Scale |
file-upload |
|
|
| Wed, 23 Sep 2026 13:57:18 GMT |
How to Promote Your Business Online Without a Website in India |
directory-listing |
|
|
| Fri, 23 Oct 2026 21:01:41 GMT |
Complete Guide on mTLS for Interviews and Penetration Testing —... |
hackerone |
|
|
| Sat, 31 Oct 2026 07:13:24 GMT |
One Cyberattack Can Cost a UAE Business More Than Its Annual Prof... |
vapt |
|
|
| Fri, 04 Sep 2026 02:36:00 GMT |
Stored Cross-User XSS via Double-Decode Sanitizer Bypass in React... |
xss-bypass |
|
|
| Fri, 30 Oct 2026 05:14:47 GMT |
Where can I find professional ethical hackers ? |
bugcrowd |
|
|
| Thu, 01 Oct 2026 15:48:07 GMT |
My First Time Doing GitHub & Google Dorking on a Real Target |
google-dorking, github-dorking |
|
|
| Tue, 01 Sep 2026 20:11:03 GMT |
From Bug to Schema: Exploring Error-Based SQL Injection on an Aut... |
vulnerability-disclosure |
|
|
| Sat, 24 Oct 2026 02:31:01 GMT |
Blind SSRF Isn’t Blind If You Build the Channel Back |
ssrf |
|
|
| Tue, 03 Nov 2026 02:08:31 GMT |
“Test shows the presence of bugs, but never their absence†|
bugs |
|
|
| Tue, 03 Nov 2026 16:51:20 GMT |
How Scanning for Patches can result in complete System Compromise |
exploit |
|
|
| Thu, 29 Oct 2026 12:10:45 GMT |
When OAuth Bypasses 2FA: Finding an Authentication Misconfigurati... |
hackerone |
|
|
| Wed, 05 Aug 2026 22:36:52 GMT |
The Hollow Shell | Hacker Holidays Day 10 | TryHackMe Writeup |
local-file-inclusion |
|
|
| Wed, 18 Mar 2026 10:03:26 GMT |
Web Security Series #7 — Exploiting Blind SQL Injection via Ses... |
bug-bounty-hunting |
|
|
| Fri, 30 Oct 2026 19:18:50 GMT |
10 Reasons Annual Penetration Testing May Not Be Enough for Moder... |
vapt |
|
|
| Fri, 06 Jun 2025 15:47:21 GMT |
ï¸â€â™‚ï¸ GitHub Dorking for Bug Bounty: Hackers' Hidden Playg... |
github-dorking |
|
|
| Wed, 04 Nov 2026 05:18:13 GMT |
PHP2Shell Vulnerability Analysis: Who Is at Risk, What Is the Imp... |
vapt |
|
|
| Sun, 05 Jul 2026 12:32:24 GMT |
How to Pick a Directory Listing Service That Actually Works |
directory-listing |
|
|
| Wed, 06 May 2026 11:36:01 GMT |
Google Dorking |
dorking |
|
|
| Thu, 22 Oct 2026 16:26:52 GMT |
PHP2Shell: The Critical PHP Vulnerabilities That Turned Ordinary ... |
remote-code-execution |
|
|
| Sun, 15 Mar 2026 16:45:35 GMT |
Web Security Series #4 — Discovering Unauthorized Resources via... |
bug-bounty-hunting |
|
|
| Mon, 06 Jul 2026 11:47:49 GMT |
UK Business Directory: Strategic Visibility for Local Market Succ... |
directory-listing |
|
|
| Sun, 18 Oct 2026 10:36:03 GMT |
How I Bypassed a Region-Locked Comment Feature on a Public Bug Bo... |
bugcrowd |
|
|
| Sat, 31 Oct 2026 12:31:20 GMT |
localhost Is Blocked. But What About localhost.? |
ssrf |
|
|
| Wed, 28 Oct 2026 13:46:17 GMT |
How a Sneaker Order Led Me to an IDOR Vulnerability (and $50) |
idor |
|
|
| Tue, 03 Feb 2026 17:12:47 GMT |
My First Week: 3 Business Logic Bugs in Major E-Commerce |
bug-bounty-program |
|
|
| Sun, 26 Jan 2025 19:08:11 GMT |
Matrix strike’s back against honesty from a power stance |
web-pentest |
|
|
| Sun, 16 Aug 2026 16:47:34 GMT |
Subdomain Takeover: A Real Bug I Foundï¸ |
subdomain-takeover |
|
|
| Wed, 14 Oct 2026 07:46:52 GMT |
Machine Identities Now Outnumber Humans and Nobody’s Watching T... |
api-key |
|
|
| Sat, 26 Sep 2026 20:41:46 GMT |
Finding Hidden Bug Bounty Programs Outside HackerOne |
bug-bounty-program |
|
|
| Sat, 01 Aug 2026 13:18:29 GMT |
Incident Analysis & Response: Check Point Security Gateway CVE-20... |
lfi |
|
|
| Sun, 18 Oct 2026 16:42:51 GMT |
Bir Hacker Gibi Düşünmek — #14 |
file-upload |
|
|
| Fri, 10 Nov 2023 03:38:01 GMT |
Apache error.log advanced Log poisoning RCE |
log-poisoning |
|
|
| Fri, 09 Oct 2026 21:51:45 GMT |
Passive Reconnaissance on Google.com Using Shodan |
shodan |
|
|
| Wed, 04 Nov 2026 16:01:04 GMT |
Signal Acquired: Cybersecurity Weekly Brief |
infosec |
|
|
| Wed, 04 Nov 2026 10:09:02 GMT |
How I Got Private Bug Bounty Invitations Without Hunting a Single... |
bug-bounty-tips, bug-bounty-writeup |
|
|
| Tue, 03 Nov 2026 18:00:28 GMT |
Shanti Se Poocho AI: Potential API Credential Disclosure |
bugs |
|
|
| Tue, 03 Nov 2026 12:47:28 GMT |
CVE-2026–82396 |
cve, xss-vulnerability |
|
|
| Fri, 09 Oct 2026 10:50:28 GMT |
Anthropic’s OSS Scanner: What AI-Powered Open-Source Security S... |
vulnerability-scanning |
|
|
| Mon, 02 Nov 2026 17:08:58 GMT |
Scan Your App for CVEs in 3 Steps |
cve |
|
|
| Sun, 25 Oct 2026 16:08:42 GMT |
What 24,817 Bug Bounty Reports Reveal About Real-World Hacking |
xss-vulnerability |
|
|
| Fri, 30 Oct 2026 09:04:47 GMT |
Bypassing Organization-Wide 2FA Enforcement with a Single API Req... |
bugbounty-writeup |
|
|
| Fri, 06 Feb 2026 06:33:08 GMT |
5 Ways to Bypass Email Verification Without Using Any Tool |
bug-bounty-program |
|
|
| Tue, 14 Apr 2026 13:07:05 GMT |
My “Gemini†Is Named Mike |
dorks |
|
|
| Tue, 23 Jun 2026 07:06:16 GMT |
Bug Bounty Recon Mastery →Advanced Reconnaissance and Attack Su... |
subdomain-enumeration |
|
|
| Tue, 21 Apr 2026 15:05:26 GMT |
Web Security Series #17 — Exploiting Local File Inclusion (LFI)... |
file-inclusion |
|
|
| Tue, 14 Jul 2026 17:10:47 GMT |
File Inclusion Challenge (TryHackMe) |
file-inclusion |
|
|
| Thu, 28 Sep 2023 23:05:39 GMT |
Archangel — TryHackMe |
log-poisoning |
|
|
| Sat, 31 Oct 2026 17:02:10 GMT |
Your AI Coding Assistant Will Run Whatever Its Config File Says |
bugbounty-writeup |
|
|
| Sun, 01 Nov 2026 23:05:40 GMT |
HTB: Trick |
local-file-inclusion |
|
|
| Mon, 31 Aug 2026 16:29:06 GMT |
File Inclusion Vulnerability: How a Simple File Request Can Beco... |
lfi |
|
|
| Wed, 04 Nov 2026 15:26:02 GMT |
“Can We Get a Report?†For Our Clients, the Answer Is Now Yes |
infosec |
|
|
| Sat, 17 Oct 2026 05:14:01 GMT |
TATA Group Security Research Discovering a Hardcoded AES Key |
vulnerability-disclosure |
|
|
| Mon, 02 Nov 2026 15:46:19 GMT |
Rate Limit Bypass Techniques: A Bug Bounty Hunter’s Field Guide |
bugbounty-writeup |
|
|
| Fri, 09 Oct 2026 08:48:33 GMT |
Who’s Who in Banking: CIF, GCIF, Account Numbers and IBAN Expla... |
bug-bounty-hunter |
|
|
| Thu, 29 Oct 2026 10:29:34 GMT |
Red Team Security Testing in UAE: Your Business Passed Every Secu... |
vapt |
|
|
| Fri, 28 Jun 2024 14:51:14 GMT |
X-Forwarded HTTP header-ləri : Qısa izah |
log-poisoning |
|
|
| Tue, 03 Nov 2026 14:40:10 GMT |
One-Click Account Takeover via WebView Auth Header Injection to C... |
bugbounty-writeup |
|
|
| Tue, 03 Nov 2026 13:48:23 GMT |
[$10,000] Google Jules — The Silent Code Heist - Stealing Git... |
bugbounty-writeup, bug-bounty-writeup, bug-bounty-hunter |
|
|
| Fri, 17 Jul 2026 16:56:29 GMT |
CTF: Archangel TryhackMe Room |
local-file-inclusion |
|
|
| Mon, 02 Nov 2026 07:06:07 GMT |
A Critical Linux Bug Dropped. Here’s How I Checked My Server. |
cve |
|
|
| Mon, 02 Nov 2026 15:26:05 GMT |
How to Stop an API Key Leak in 10 Minutes: 4 Things Every AI Dev ... |
api-key |
|
|
| Wed, 04 Nov 2026 15:06:46 GMT |
One Deep Link, Zero Validation, Full ATO (Again) |
bug-bounty-tips, bug-bounty-writeup |
|
|
| Wed, 19 Aug 2026 07:58:40 GMT |
Recruit — TryHackMe Walkthrough: From Local File Inclusion to A... |
local-file-inclusion |
|
|
| Sat, 03 Oct 2026 17:27:23 GMT |
Attacking Enterprise Networks (HTB) #1 Reconnaissance |
subdomain-enumeration |
|
|
| Tue, 24 Mar 2026 17:48:00 GMT |
The Ultimate Bug Bounty Course: From Zero to Advanced Hacker 1 |
bug-bounty-hunting |
|
|
| Wed, 14 Oct 2026 16:49:17 GMT |
The Comprehensive Guide to Design File Types |
file-upload |
|
|
| Wed, 04 Nov 2026 05:47:40 GMT |
I Audited 24 Bug Bounty Tools. Seven Haven’t Been Touched in Tw... |
infosec |
|
|
| Mon, 02 Nov 2026 05:49:31 GMT |
The Impact Section Is One Word. The Bounty Is $25,000. |
hackerone |
|
|
| Wed, 04 Nov 2026 19:36:58 GMT |
Threat Modeling an AI Agent Without STRIDE: Attackers, Vectors an... |
application-security |
|
|
| Sat, 31 Oct 2026 20:10:52 GMT |
PHP2Shell ran on two clocks. The public’s stopped first. |
vulnerability-disclosure |
|
|
| Sat, 31 Oct 2026 07:03:39 GMT |
Lab3: Web cache poisoning via ambiguous requests — HTTP Host he... |
web-cache-poisoning |
|
|
| Fri, 23 Oct 2026 16:30:40 GMT |
PortSwigger’s XSS Labs: Complete Walkthrough |
cross-site-scripting |
|
|
| Fri, 11 Sep 2026 14:01:03 GMT |
Getting Started with OSINT: Google Dorking Part 2 More Useful Sea... |
google-dork |
|
|
| Fri, 23 Oct 2026 17:01:02 GMT |
The Metadata Nobody Reads: How a Government Portal Leaked Interna... |
information-disclosure |
|
|
| Fri, 25 Sep 2026 03:44:00 GMT |
[Padelify] — Blind XSS to Moderator Account Takeover, WAF Byp... |
lfi |
|
|
| Thu, 20 Aug 2026 09:21:53 GMT |
From Open Ports to Vulnerabilities: My Hands-On Practice with Nma... |
vulnerability-scanning |
|
|
| Fri, 25 Sep 2026 14:36:02 GMT |
It Thought It Was Only a Test: The Strange Case of Gemini and the... |
vulnerability-disclosure |
|
|
| Fri, 23 Oct 2026 09:22:21 GMT |
PHP2Shell: The Zero-Day Nightmare Lurking Inside Your PHP Runtime |
remote-code-execution |
|
|
| Mon, 16 Mar 2026 14:32:42 GMT |
Web Security Series #5 — Exploiting Broken Access Control via T... |
bug-bounty-hunting |
|
|
| Fri, 30 Oct 2026 08:47:46 GMT |
IT/OT Convergence Security Why Convergence Increases Risk |
vapt |
|
|
| Mon, 24 Aug 2026 19:17:26 GMT |
Metasploit Scanning and Exploitation: From Reconnaissance to Expl... |
vulnerability-scanning |
|
|
| Sat, 02 Aug 2025 14:15:23 GMT |
The Silent Risk in Your ICS: Why S7 Protocol Needs Security Atten... |
censys |
|
|
| Fri, 23 Oct 2026 06:27:10 GMT |
The Key Wasn’t the Leak |
api-key |
|
|
| Mon, 12 Oct 2026 12:58:28 GMT |
The Blast Radius of Zero: Scoped API Keys for LLM Traffic |
api-key |
|
|
| Tue, 15 Sep 2026 00:14:38 GMT |
Web Cache Deception via URL Parsing Discrepancy — PII Disclosur... |
web-cache-poisoning |
|
|
| Fri, 31 May 2024 13:29:16 GMT |
Map of the worlds best URLs 2025 |
log-poisoning |
|
|
| Thu, 09 Jul 2026 12:43:47 GMT |
The Easy Bug Series | #01 |
bounty-program |
|
|
| Wed, 04 Nov 2026 07:56:14 GMT |
Hands-On Cryptography with Python: 18 Practical Implementations f... |
infosec |
|
|
| Mon, 20 Jul 2026 10:56:47 GMT |
Task 2 -> OSINT Techniques (Google Dorking) |
google-dorking |
|
|
| Mon, 02 Nov 2026 07:01:02 GMT |
Prioriser ses patchs avec le catalogue CISA KEV : la méthode sim... |
cve |
|
|
| Mon, 13 Apr 2026 03:31:01 GMT |
Google Dorks Google Ko Bana Do Apna Hacking Tool: Free Mein Bugs ... |
github-dorking |
|
|
| Tue, 03 Nov 2026 06:05:43 GMT |
PHP2Shell: When Two Critical CVEs Put PHP Servers at Risk |
cve |
|
|
| Fri, 12 Jun 2026 12:04:09 GMT |
The Print Button That Handed Me Your Account: Stored XSS to Full ... |
xss-bypass |
|
|
| Fri, 21 Aug 2026 05:15:30 GMT |
FORCEDENTRY — Pegasus’ning iMessage orqali zero-click hujumi ... |
cyber-sec |
|
|
| Fri, 23 Oct 2026 20:50:30 GMT |
The frontend knew who was an admin. The server forgot to check |
bug-bounty-hunter |
|
|
| Thu, 20 Nov 2025 09:45:04 GMT |
Timber Doors in Surrey: Style, Durability, and Value Explained |
dorking |
|
|
| Fri, 25 Sep 2026 06:12:21 GMT |
The best event experiences start at the entrance. |
directory-listing |
|
|
| Mon, 22 Jun 2026 06:51:54 GMT |
Find exposed sensitive data in AWS, Google Cloud, and other platf... |
dorks |
|
|
| Wed, 04 Nov 2026 11:01:01 GMT |
Authorization Bypass (IDOR) in WPGraphQL |
cve |
|
|
| Wed, 30 Sep 2026 11:52:45 GMT |
Garak LLM Scanner: what it caught and what it couldn’t see |
vulnerability-scanning |
|
|
| Tue, 05 Dec 2023 07:54:40 GMT |
LFI via SMTP log poisoning |
log-poisoning |
|
|
| Wed, 22 Jul 2026 19:19:21 GMT |
Back From Vacation & Launching Open Beta: Help Us Test NextBlock ... |
bounty-program |
|
|
| Wed, 07 Oct 2026 09:35:26 GMT |
NO AI, How I Exposed a Database Without Injecting Anything |
bugcrowd |
|
|
| Tue, 19 May 2026 14:13:53 GMT |
Guildford to Box Hill |
dorking |
|
|
| Thu, 22 Oct 2026 11:02:12 GMT |
I Started Learning Bug Bounty, and I Realized Recon Is Half the B... |
bug-bounty-hunting |
|
|
| Wed, 23 Jul 2025 15:15:01 GMT |
TryHackMe Include walkthrough: SSRF, log poisoning & LFI2RCE, wit... |
log-poisoning |
|
|
| Fri, 14 Aug 2026 17:01:43 GMT |
Dorks that could get you a good bounty in 2026 |
google-dorking |
|
|
| Mon, 27 Jan 2025 16:51:28 GMT |
The man who suffered 11 years in hell for freedom has now been fr... |
web-pentest |
|
|
| Mon, 03 Aug 2026 20:29:20 GMT |
Sublist3r |
subdomain-enumeration |
|
|
| Tue, 06 Oct 2026 05:13:05 GMT |
AIMap in Cybersecurity: Visualizing the Hidden Attack Surface |
cybersecurity-tools |
|
|
| Sat, 19 Sep 2026 20:48:50 GMT |
I Read The Policies So You Don’t Have To; Bugcrowd (Vulnerabili... |
bugcrowd |
|
|
| Mon, 02 Nov 2026 17:50:33 GMT |
Killed by a Browser, Revived by a Backslash |
bugbounty-writeup, bug-bounty-hunter |
|
|
| Tue, 03 Nov 2026 15:01:37 GMT |
“Exploiting Trust: DOM Clobbering to Same-Origin Script Executi... |
bug-bounty-writeup, xss-vulnerability |
|
|
| Tue, 29 Sep 2026 01:23:50 GMT |
HTB Trick Walkthrough: From DNS Zone Transfer to Fail2Ban Root |
lfi |
|
|
| Mon, 05 Oct 2026 17:45:18 GMT |
Catching a Dangling CNAME: How an Unclaimed Squarespace Subdomain... |
subdomain-takeover |
|
|
| Mon, 27 Jul 2026 19:35:36 GMT |
Brew Bank Revenge — Official Writeup | EYCC CTF |
lfi |
|
|
| Tue, 21 Apr 2026 14:42:50 GMT |
Web Security Series # 16— Exploiting Local File Inclusion (LFI) |
file-inclusion |
|
|
| Fri, 19 Sep 2025 07:40:16 GMT |
How I Tracked Our Clients’ Device Versions Without Direct Repor... |
zoomeye |
|
|
| Tue, 03 Nov 2026 15:20:26 GMT |
Stealing App Internal Files via Intent Redirection to Insecure We... |
bug-bounty-writeup |
|
|
| Fri, 21 Aug 2026 10:55:32 GMT |
Managing Scan Results in Metasploit |
recon |
|
|
| Fri, 23 Oct 2026 02:48:08 GMT |
PHP2Shell | How an AI Uncovered a 10-Year-Old Flaw Threatening 7... |
remote-code-execution |
|
|
| Wed, 30 Sep 2026 09:01:46 GMT |
The Tiny Project Logic Bug That Unlocked Enterprise |
vulnerability-disclosure |
|
|
| Mon, 02 Nov 2026 16:55:02 GMT |
Hiding in Plain Sight: A Hands-On Look at Confluence’s Widget C... |
rce |
|
|
| Tue, 11 Aug 2026 08:57:49 GMT |
DEV DIARIES — TRY HACK ME WALKTHROUGH: |
subdomain-enumeration |
|
|
| Thu, 24 Sep 2026 02:52:39 GMT |
Choosing the Right Bug Bounty Platform: HackerOne vs Bugcrowd vs ... |
bugcrowd |
|
|
| Mon, 17 Aug 2026 10:48:46 GMT |
Google Dorking, Search Techniques, and File Formats |
google-dorking |
|
|
| Sat, 19 Sep 2026 19:06:37 GMT |
Google Dorking for Bug Hunters: Real-World Case Studies |
google-dork |
|
|
| Wed, 26 Aug 2026 11:12:57 GMT |
picoCTF Medium — No FA Writeup |
web-pentest |
|
|
| Fri, 23 Oct 2026 15:40:29 GMT |
Ghidra vs REA: Traditional SRE Workstations Meet Agentic Reverse ... |
security-research |
|
|
| Fri, 05 Jun 2026 04:49:28 GMT |
Price Manipulation in Payment Gateway / Shopping Cart |
vdp |
|
|
| Mon, 29 Jun 2026 10:46:38 GMT |
Costa Rica Canopy Tours: Choosing Experiences That Match Your Com... |
directory-listing |
|
|
| Wed, 04 Nov 2026 17:25:18 GMT |
Turn Thousands of Application Log Lines Into a Report You Can Act... |
application-security |
|
|
| Mon, 02 Nov 2026 17:44:01 GMT |
How I Found My First Bug: Information Disclosure via Exposed Dire... |
information-disclosure |
|
|
| Tue, 17 Mar 2026 09:18:53 GMT |
Web Security Series #6 — Exploiting SQL Injection to Extract Se... |
bug-bounty-hunting |
|
|
| Mon, 29 Jun 2026 06:52:04 GMT |
My First Cross-Site Scripting (XSS) Vulnerability: A Journey of P... |
xss-bypass |
|
|
| Sun, 19 Jul 2026 19:30:09 GMT |
Login Security Testing Checklist |
bug-bounty-hunting |
|
|
| Tue, 27 Oct 2026 10:09:06 GMT |
The WAF Said No: Finding XSS Through JavaScript Recon |
xss-vulnerability, xss-bypass |
|
|
| Wed, 28 Oct 2026 11:48:10 GMT |
Pwning 15M+ Systems by Renaming a Song: From a CMS Audit to an Up... |
rce |
|
|
| Tue, 27 Oct 2026 14:29:51 GMT |
Tutorial 5 PortSwigger Lab: DOM XSS in document.write sink using ... |
xss-vulnerability |
|
|
| Thu, 10 Sep 2026 10:24:10 GMT |
CVE-2026–69194: Cross-Site Scripting in FileRise |
xss-bypass |
|
|
| Fri, 30 Oct 2026 02:45:31 GMT |
Jerry Machine | HTB Challenge #5 Walkthrough | Road To OSCP |
pentest |
|
|
| Mon, 07 Sep 2026 10:29:47 GMT |
The 5-Phase Pentesting Model, Explained Simply |
pentest |
|
|
| Fri, 17 Apr 2026 19:01:54 GMT |
The Ultimate Guide to Wayback Machine Dorking for Deleted Leaks |
dorking |
|
|
| Sun, 25 Oct 2026 18:55:44 GMT |
PHP2Shell: Simplest Explanation |
rce, remote-code-execution |
|
|
| Sat, 24 Oct 2026 06:01:38 GMT |
PHP2Shell: What Happens When Attackers Know Before Defenders Do? |
remote-code-execution |
|
|
| Fri, 02 Oct 2026 13:36:07 GMT |
Shodan.io: The Search Engine for Internet-Connected Devices |
shodan |
|
|
| Tue, 03 Nov 2026 20:14:13 GMT |
How a Single Leaked Client Secret Exposed a Private GitHub Repo |
bug-bounty-tips |
|
|
| Fri, 23 Oct 2026 17:37:40 GMT |
PHP2Shell: Taking Production Offline Cannot Become the New Normal |
exploit |
|
|
| Tue, 01 Sep 2026 19:13:24 GMT |
pixi on UBI-micro: A Safer, Smaller Multi-Stage Container Build |
vulnerability-scanning |
|
|
| Sat, 24 Oct 2026 15:46:01 GMT |
Direct-to-R2 Uploads: Presigned PUTs, Multipart, and 1000 Files a... |
file-upload |
|
|
| Mon, 13 Apr 2026 06:37:51 GMT |
File Inclusion on DVWA |
file-inclusion |
|
|
| Tue, 03 Nov 2026 17:06:01 GMT |
A Database With the Front Door Left Open: Misconfigured Firebase ... |
bug-bounty-tips |
|
|
| Thu, 03 Sep 2026 06:34:13 GMT |
Bypassing WhatsApp Web’s Single-Session Restriction Using an In... |
bug-bounty-hunting |
|
|
| Mon, 13 Jul 2026 08:48:39 GMT |
Censys 是什麼？和 Shodan 常被拿來比較，兩者實際å·... |
censys |
|
|
| Wed, 04 Nov 2026 11:15:15 GMT |
Ð›Ð°Ð±Ð¾Ñ€Ð°Ñ‚Ð¾Ñ€Ð½Ð°Ñ Ñ€Ð°Ð±Ð¾Ñ‚Ð° по Threat Intelligence: Ñ... |
infosec |
|
|
| Tue, 29 Sep 2026 17:06:32 GMT |
How I Bypassed an OTP Verification Limit by Chaining Multiple Log... |
bugcrowd |
|
|
| Mon, 20 Jul 2026 06:24:37 GMT |
Using Cache Deception Techniques to Discover Cache Poisoning Vect... |
web-cache-poisoning |
|
|
| Tue, 03 Nov 2026 14:13:46 GMT |
VAPT Testing Cost in India: Complete Pricing Guide for Businesses... |
vapt |
|
|
| Thu, 02 Apr 2026 18:59:50 GMT |
File Inclusion (LFI/RFI) — Extracting Sensitive Data from confi... |
file-inclusion |
|
|
| Thu, 29 Oct 2026 16:08:33 GMT |
CWE-540 in the Wild: Hardcoded Credentials in a Production Analyt... |
hackerone, bugbounty-writeup |
|
|
| Wed, 15 Jul 2026 11:30:22 GMT |
TryHackMe | Google Dorking |
google-dorking |
|
|
| Tue, 16 Jun 2026 11:22:14 GMT |
Review AtDork: Tool Dorking Python Terbaik 2026? |
dorking |
|
|
| Sun, 01 Nov 2026 12:22:00 GMT |
PHP2Shell: Understanding Two Critical PHP Runtime Vulnerabilities... |
rce |
|
|
| Wed, 29 Jul 2026 12:30:32 GMT |
Is Google Dorking Legal? Understanding the Ethical and Legal Aspe... |
google-dorking |
|
|
| Sat, 06 Jun 2026 07:18:44 GMT |
Update: The Ending of My $500 Loss and Web Cache Poisoning Story. |
web-cache-poisoning |
|
|
