Hack a webcam with a smartphone

Recently I was on vacation with my girlfriend. One night I couldn’t sleep so I decided to play around…

How I hacked an online exam portal and gave my exam from my home?

Pwning WordPress Passwords

In my last writeup, I recovered mysql credentials from a server and wrote a webshell to disk from there. This…

Blind XSS for beginners

I get a lot of DM’s in twitter asking questions about Blind XSS like which tool to use, how to register in XSShunter…

How I crashed a website with a single line command?

$4500 Bounty — How I got lucky

This is a short explanation of how I took over a subdomain by doing recon at the right time and what I…

How Apple store all your email metadata for years on their servers

Today I’m going to reveal how Apple ended up with all the metadata of the emails you ever sent (and even received in some cases) using the official Mail app since the launch of iCloud.

Nineveh — Retired HTB Walkthrough

I have previously used hydra to do some web login brute forcing, and in this recently retired Hack…

NodeJS Application Pentest Tips - Improper URI Handling in Express

Web application penetration test methodologies have many concepts/tests in common. However, each language and infrastructure has its own specific vulnerability class and way of testing. Indicating some:

From Microsoft “Build the Shield” to Microsoft “Hall of Fame”