Lucky Singh Rawat·1d agoWeb Cache Deception (WCD)Different from cache poisoning, WCD tricks a cache into storing a private, dynamic response (containing sensitive data like API keys, CSRF…
kamaji·3d agoRubber Stamp (TryHackMe) — De IIS a Domain Admin: ViewState Deserialization + AD CS ESC1Cómo un archivo de respaldo olvidado encadena hasta el control total del dominio. Walkthrough sin spoilers: las banderas aparecen…
Manuelfdzgo·5d agoMy first AI bug report got closed within hours (and that was good for me)I’ve been doing web and API penetration testing for a while, and bug bounty at night for the last few months. What pulled me toward AI…
Steaven Gratia Purba·Oct 30Tcpdump Vs WiresharkTcpdump & wireshark adalah packet capture yang sering digunakan oleh SOC anylist, incident responder, atau network engineer dan lain…
Rafiuzzamankhanrafi·Oct 25🕵️♂️ Understanding Username Enumeration & Password Brute-ForcingWhen building or securing a web application, authentication is often the first line of defense. However, subtle implementation details can…
InThe Sec EditbyStephanie·Oct 21The Oppression of Politeness: Why Kindness is Enterprise Security’s Easiest Exploit“Kids are social engineers.”
Moses l.R.·Oct 21Kali Linux Installation & Documentation: From Virtual machine Setup to First BootBy: Stephen Moses Lumbanradja
