A_box4·3d agoAuthentication Bypass via Password Reset Flow Manipulationقَالُوا سُبْحَانَكَ لَا عِلْمَ لَنَا إِلَّا مَا عَلَّمْتَنَا ۖ إِنَّكَ أَنتَ الْعَلِيمُ الْحَكِيمُ
Ahmad Solehudin·Oct 26PortSwigger | SQL Injection LabSQL injection vulnerability allowing login bypass
Vivek Yadav·Oct 14Bypassing Login with SQL Injection: PortSwigger Lab Walkthrough.If you’re going through PortSwigger’s Web Security Academy, the “SQL injection vulnerability allowing login bypass” lab is one of the first…
Mayank Ningania·Sep 20Lab: JWT authentication bypass via weak signing key | JWT | Portswigger (writeup)This lab uses a JWT-based mechanism for handling sessions. It uses an extremely weak secret key to both sign and verify tokens. This can be…
Mayank Ningania·Sep 20Lab: JWT authentication bypass via flawed signature verification | JWT | Portswigger (writeup)This lab uses a JWT-based mechanism for handling sessions. The server is insecurely configured to accept unsigned JWTs.
InMeetCyberbyBash Overflow·Sep 14[Overpass] — Cookie Bypass, SSH & Cron Privilege EscalationFrom client-side authentication flaws to root through SSH and cron.
Abhishek (Bug Hunter)·Sep 13Authentication Bypass lead to Account Takeover via IDOROne Mistake Made Me Rich 💸A response icon2A response icon2
Synthex·Sep 12Understanding CVE-2026–86426: The Critical Type Confusion Flaw in LibreNMSRelational databases and web application frameworks often communicate seamlessly, but subtle type mismatches can quietly break core…
GHOSTEYE💀·Sep 12Phantom Fob: How a Plaintext Counter on CAN Bus Let Me Forge Any Fob CommandRoom: TryHackMe — Phantom Fob Category: Automotive / Embedded Security — CAN Bus Target: 10.49.189.4 Platform: Kali Linux
