Library CTF — THM Writeup
whoami: ZODiAK Continue reading on Medium » whoami: ZODiAKContinue reading on Medium » Read More Hacking on Medium #hacking
A Database With the Front Door Left Open: Misconfigured Firebase Security Rules
Serverless backend-as-a-service platforms have shifted an enormous amount of what used to be server-side authorization logic into a… Continue reading on Medium » Serverless backend-as-a-service platforms have shifted an enormous…
INE Web Application Penetration Testing: Web Fingerprinting and Enumeration CTF 1
This is a direct CTF solving, just showing how I could find the flags, without theoretical explanation. Unfortunately, as my INE… Continue reading on Medium » This is a direct…
Claude Found a Crypto Miner by Accident. It Wasn’t the Wildest Thing It Found This Fall.
A car stereo that shipped with a call recorder, a planet candidate, an enzyme system nobody had described. What happens when people stop… Continue reading on Medium » A car…
How Hackers Drained $6.3B From Binance Without Stealing Private Keys
The Biggest Crypto Heist Ever. Continue reading on Medium » The Biggest Crypto Heist Ever.Continue reading on Medium » Read More Hacking on Medium #hacking
Exploiting Resource-Based Constrained Delegation (RBCD) to Escalate Privileges in Active Directory
In this walkthrough, I’ll demonstrate how Resource Based Constrained Delegation (RBCD) can be abused to escalate privileges within an… Continue reading on Medium » In this walkthrough, I’ll demonstrate how…
Why I Carry Four Screens Out the Door
LifeOS Continue reading on JIN System Architect » LifeOSContinue reading on JIN System Architect » Read More Hacking on Medium #hacking
WriteUp HackerDNA traversed
HackerDNA est une plateformes pour débutants et avancés avec labs, hacks quotidiens, parcours d’apprentissage et cours. Continue reading on Medium » HackerDNA est une plateformes pour débutants et avancés avec…
SubZer0 Explained | PHP2Shell Exploits Target Palo Alto Networks Firewalls
Introduction Continue reading on Medium » IntroductionContinue reading on Medium » Read More Hacking on Medium #hacking
Cult of Cthulhu v2
Good news, acolytes: the Great Old One whispers again! Continue reading on Medium » Good news, acolytes: the Great Old One whispers again!Continue reading on Medium » Read More Hacking…
Your 15 Cybersecurity Certifications Won’t Save You From Someone Who Knows How to Use AI.
Congratulations on your CISSP, CISM, CEH, OSCP, and seventeen LinkedIn badges. Unfortunately, the guy who knows Python, understands… Continue reading on Medium » Congratulations on your CISSP, CISM, CEH, OSCP,…
A Fake Captcha Asked One Berlin Employee to Paste a Command. It Cost the City 5.79 TB Data.
A fake captcha got one employee to paste a command into their own terminal, and that opened the door to 2 Senate departments. Continue reading on Soursen » A fake…
Critical Langflow Flaws: Unauthenticated Code Execution
By Tejas Saubhage · Nov 3, 2026 Continue reading on Medium » By Tejas Saubhage · Nov 3, 2026Continue reading on Medium » Read More Hacking on Medium #hacking
Unintended
What will you gain? Continue reading on Medium » What will you gain?Continue reading on Medium » Read More Hacking on Medium #hacking
10 Burp Suite Features Most Bug Bounty Hunters Don’t Know About
I used Burp for almost a year before finding half of these — here’s everything buried in the menus that actually finds bugs Continue reading on MeetCyber » I used…
The Bridge Between a Web Page and the Phone Itself: Abusing an Android WebView JavaScript Interface
Hybrid mobile apps occupy an unusual security position: part native application, part embedded web browser, with a deliberate bridge… Continue reading on Medium » Hybrid mobile apps occupy an unusual…
How to Code Python PoCs to Exploit Web Vulnerabilities (2026 Guide)
A complete beginner-friendly guide, to understanding web vulnerabilities and how to exploit them using Python. Continue reading on System Weakness » A complete beginner-friendly guide, to understanding web vulnerabilities and…