Mohamed Nowisar·7h agoHow I Bypassed 2FA by Changing One Request Parameter — and Earned a $$$ Bountyالحمد لله الذي عَلَّمَ بالقلم.. عَلَّمَ الإنسانَ ما لم يَعْلَم والصلاةُ والسلامُ على خيرِ مُعَلِّمي الناسِ الخير محمد أما بعدA response icon2A response icon2
Akash motkar·9h agoP3 — Insecure Direct Object Reference (IDOR) in User Profile APISeverity: Medium (P3) Vulnerability Type: Broken Object-Level Authorization (BOLA / IDOR) CWE: CWE-639 — Authorization Bypass Through…
CypherNova1337·21h agoThe First Run Found a Live KeySecret scanners are famous for noise: ten thousand matches, three real secrets, and the real ones buried under CSS class names and sample…
Diva Rizky Alfitrah·22h agolab 13 Basic clickjacking with CSRF token protection⚠️ Peringatan Keamanan & Etika (Disclaimer)
Muhammed Irfan·1d agoHack The Box: Management — Walkthrough (CVE-2026–33439 to Root)Difficulty: Easy OS: Linux
CypherNova1337·1d agoThe WAF Was Never the WallEvery serious engagement against a modern estate starts the same way: ignore the WAF. It’s not the wall — it’s a curtain. Behind it are the…
CypherNova1337·1d agoThe Template That Closes Real Findings: Anatomy of a CORS DismissalA demonstrated cross-origin data-theft channel on licensed claims and actuarial portals was closed as “Informative” with a response that…
S12 - 0x12Dark Development·1d agoExecuting Stardust Shellcode in an Isolated vCPUWelcome to this new Medium post, this one is the next part of this post:
InMeetCyberbyRoshan Rajbanshi·2d agoHack Smarter Security — Dell OMSA File Read + Writable Service Privesc | TryHackMeThe Hack Smarter APT group runs a Dell OpenManage-fronted Windows server, and the fastest way in has nothing to do with their flashy decoy…
Мартин.·2d agoOffensive Security: Lightweight, Secure, and Zero-Configuration TUIC Proxy Server Deployment ToolC-Shadow
