Archive

Step-by-step container escape from a privileged Docker environment using Linux kernel features, Kubernetes insights, and real exploitation techniques.

I tried to prepare for life in French-speaking Canada by turning language drills into a Tamagotchi. It worked, as long as you don't ask me whether my coffee is for here or to go.

Sekoia.io exposes a Booking.com phishing campaign targeting hotels and customers using ClickFix and PureRAT malware.

This blog post provides a dive into HTTP/3’s evolution for security engineers, an overview of our research journey, and what led us to develop the open-source tool QuicDraw, which can be used for...

TURN server allowed proxying of TCP connections and UDP packets to internal Slack network and meta-data services on AWS.

Introduction This blog serves as a detailed methodology guide for analyzing, reversing, and researching web vulnerabilities, particularly those with CVEs assigned. The content outlines repeatable processes used to evaluate vague advisories, analyze vulnerable software, and ultimately recreate or validate security flaws. The objective is to establish a structured, replicable approach to web vulnerability research. Environment & Tools When approaching a new target for CVE research or reverse-e

Looking to learn AWS penetration testing? Here are essential AWS pentesting techniques and tools to help you get started!

Introduction Earlier this year, I earned a $10,000 bounty from Microsoft after discovering a critical HTTP request smuggling vulnerability in ASP.NET Core’s Kestrel server (CVE-2025-55315). The vulnerability garnered significant media attention after Microsoft assigned it a CVSS score of 9.9, the highest severity rating ever assigned to an ASP.NET Core vulnerability. This post walks through […]

Flutter SSL Bypass: How to Intercept HTTPS Traffic When all other Frida Scripts Fail بِسْمِ اللَّـهِ الرَّحْمَـٰنِ الرَّحِيم Hello Folks In this article, I’ll …

Contribute to sbaresearch/whatsapp-census development by creating an account on GitHub.

A case for question-mark smuggle: using Unicode surrogates to bypass input validation with replacement character fallback.

JS for Bug Bounties 2.0 Extreme Edition 2024 Hi everyone, I am Aditya Shende aka Kongsec from India. A Bounty Hunter , Biker , Researcher and Trainer . As I am training people in Bug Bounty from last …

Pentesting Firebase Rəqəmsal oğrulara salam olsun. Pentest üçün mobile app göndərirlər, atırsan JADX ilə statik olaraq analiz etməyə. Şesi nəsə tapmaq üçün “secret_key” …

⚠ Важно: Все материалы предоставлены исключительно в образовательных целях.

Common OAuth Vulnerabilities

Combining response-type switching, invalid state and redirect-uri quirks using OAuth, with third-party javascript-inclusions has multiple vulnerable scenarios where authorization codes or tokens could leak to an attacker. This could be used in attacks for single-click account takeovers. Frans Rosén, Security Advisor at Detectify goes through three different scenarios found in the wild below.

Critical authentication bypass vulnerabilities were discovered in ruby-saml up to version 1.17.0. See how they were uncovered.

!exploitable Episode Two - Enter the Matrix

Russian IT company among group’s latest targets. Attackers may have been attempting to target company’s customers in Russia with software supply chain attack.

Common email phishing tactics in 2025 include PDF attachments with QR codes, password-protected PDF documents, calendar phishing, and advanced websites that validate email addresses.

Kaspersky researchers discovered previously unidentified commercial Dante spyware developed by Memento Labs (formerly Hacking Team) and linked it to the ForumTroll APT attacks.

Attackers are gaining access using a custom, Sandworm-linked webshell and are making heavy use of Living-off-the-Land tactics to maintain persistent access.

We bypassed human approval protections for system command execution in AI agents, achieving RCE in three agent platforms.

# Summary Prior to `langgraph-checkpoint` version `3.0` , LangGraph’s `JsonPlusSerializer` (used as the default serialization protocol for all checkpointing) contains a remote code execution (RC...

Learn how to assess Next.js apps for SSRF, XSS, CSTI, SSTI, CSRF, cache issues, and data leaks. Practical tips, checks, and tools for bug bounty and pentesting.