Search for a command to run...
Series
Pentest series revealing vulnerabilities found in penetration testing. Aimed at security professionals and developers, It provides insights into identifying weaknesses and exploitation techniques to enhance application security.
When we talk about account takeover, we usually imagine a familiar story: an attacker steals credentials, hijacks a session, or abuses password reset flows to log in as someone else. This write-up is about something more subtle — and arguably more da...
GOAD Deployment on ESXI Sphere 8 from scratch
Howdy mates, I wanted to write a short blog on OSINTLEAK, which is a very powerful OSINT platform. Unlike Dehashed, it has a larger database of leak contents, making it very useful for bug hunters, penetration testers, and red teamers. It offers nume...
Note: For maintaining the program's privacy I won't disclose the program. So, a few months back I and Haseeb were hunting on a private program and the program is a services-based company that has paid services only. So the program had very limited as...
Hey All, this blog post is a review of CRTP certification by alteredsecurity which is one of the greatest certifications on red teaming and Active Directory pen-testing. If you want to learn or sharpen your Active Directory penetration testing skills...
Hey fellow hackers, I'm not gonna bore you with a long story of this pentest project. Last month I was working on a Pen-testing project and I found multiple critical & high vulnerabilities and I'll cover the interesting findings only. I won't share t...
