Gaurav Jain·14h agoFrom a Profile Picture Upload to RCE: Hunting an ASP.NET/IIS VulnerabilityA real-world security testing journey involving reconnaissance, application logic, file-upload analysis, Stored XSS, and server-side code…
Nazım Kurt·14h agoTryHackMe Include: BOPLA, SSRF, LFI and SSHPlatform: TryHackMe Target: 10.114.138.85 Difficulty: Medium
Kira·16h agoHow I Used Ollama + Hermes Agent to Complete My OSAI Labs in One Week — And How You Can Set It UpHey everyone!
v01d19·16h agoIDOR allows cross account workspace metadata disclosureHello friend, I hope you’re doing great. Today, I’m going to share a very simple IDOR vulnerability I found in an external bug bounty…
Rotimi Ishola·18h agoMetasploit: Scanning and Exploitation — TryHackMe WalkthroughA hands-on TryHackMe walkthrough: from port scan to SYSTEM on Windows and root on Linux, using the scan → store → identify → exploit loop.
Jakub Stonavsky·18h agoSimulating a battery cabinet in OpenPLC and testing it over Modbus and HTTPOne of my best friends builds solar and water power plants for a living and recently he asked me about the possibilities of testing battery…
Samadhan shimple·19h agoI Found an Interesting DOM-Based XSS Issue in Contact Form | by Samadhan ShimpleWhile exploring different client-side security issues, I came across an interesting DOM-based Cross-Site Scripting (XSS) vulnerability…
Furqan P.·19h agoBreaking Into Kioptrix Level 1: From Network Reconnaissance to Root AccessAn investigation of legacy Linux services, Samba enumeration, remote buffer overflow exploitation, and a successful root-level compromise.
Corey Clay·20h agoHTB Certified Penetration Testing Specialist (CPTS) ReviewIn late October 2026, I passed the Hack The Box Certified Penetration Testing Specialist (CPTS) exam on my first attempt.A response icon1A response icon1
