v01d19·1d agoIDOR allows cross account workspace metadata disclosureHello friend, I hope you’re doing great. Today, I’m going to share a very simple IDOR vulnerability I found in an external bug bounty…
NadaAshraf·2d agoPresidential: 1 — From Web Enumeration to Root via Linux CapabilitiesA hands-on penetration-testing lab covering Nmap, virtual-host discovery, exposed backups, phpMyAdmin CVE-2018-12613, PHP session…
eXecure - Execute Securely·3d agoQuasar: A Cross-Platform Subdomain Enumeration Framework for Modern Cybersecurity & Red Team…Automating Subdomain Discovery, DNS Validation, Results Consolidation, and HTTP/HTTPS Service Detection with Python.
itsov1·3d agoUnderstand the Attacker Lifecycle -Cyber Kill ChainBefore you defend yourself or your organization as a Blue Team or Red Team you must understand the Lifecycle of an attacker.
Razzle Mouse 🐭·4d agoHack Smarter: Kitsune WriteupPlatform: HackSmarter | Difficulty: Medium | Category: Active Directory | Objectives: User flag, root flag
Vigneshkumaroffsec·5d agoGiving an AI Agent a File Reader Without a Fence: Arbitrary File Read in an AWS Open-Source ToolWhat happens when a tool you hand to an LLM can read any path on your machine
Beyza Ozbakir·6d agoBuilding My First SOC Lab: Attack & Detect Using Kali Linux, Nessus, Wazuh and SuricataCybersecurity itself is a field where knowledge becomes much more powerful when it is practiced and observed on an actual laboratory…
Vigneshkumaroffsec·6d agoDAST and Web Recon Explained: An End-to-End Methodology for Understanding Any Web ApplicationHow to map a web application before you test it, which tools to use at each stage, and how to turn the whole process into a repeatable…
