<![CDATA[Pentesting on Medium]]> https://medium.com/tag/pentesting/latest?source=rss------pentesting-5 https://cdn-images-1.medium.com/proxy/1*TGH72Nnw24QL3iV9IOm4VA.png Pentesting on Medium https://medium.com/tag/pentesting/latest?source=rss------pentesting-5 Medium Wed, 06 May 2026 13:55:49 GMT <![CDATA[Sauna — HTB Writeup]]>

Introduction:

Continue reading on Medium »

]]> https://medium.com/@washively/sauna-htb-writeup-53f920881648?source=rss------pentesting-5 https://medium.com/p/53f920881648 Tue, 05 May 2026 23:19:11 GMT 2026-05-05T23:19:11.899Z <![CDATA[Silencing EDR Network Telemetry: WFP Callout Patching via BYOVD]]>

Welcome to this new Medium post. Today we are going to use kernel read and write primitives to silence EDR network telemetry at the kernel…

Continue reading on Medium »

]]> https://medium.com/@s12deff/silencing-edr-network-telemetry-wfp-callout-patching-via-byovd-1f9ee7ed0e67?source=rss------pentesting-5 https://medium.com/p/1f9ee7ed0e67 Tue, 05 May 2026 21:01:12 GMT 2026-05-05T21:01:12.309Z <![CDATA[The “Infinite Discount” Glitch: How I Used a Race Condition to Buy a MacBook for -$300]]>

This is the story of how a “boring” e-commerce site turned into a playground for a Race Condition vulnerability. If you think hacking is…

Continue reading on Medium »

]]> https://medium.com/@21bec131/the-infinite-discount-glitch-how-i-used-a-race-condition-to-buy-a-macbook-for-300-4257a28e1946?source=rss------pentesting-5 https://medium.com/p/4257a28e1946 Tue, 05 May 2026 16:21:01 GMT 2026-05-05T16:21:01.827Z <![CDATA[Write-Up: BugForge Daily Challenge Cheesy Does It]]>

Yooo! Today is a special day because this is my first-ever-write-up! 🥳 super fastt!~~

Continue reading on Medium »

]]> https://medium.com/@poom66310/write-up-bugforge-daily-challenge-cheesy-does-it-f4c8c5f353dc?source=rss------pentesting-5 https://medium.com/p/f4c8c5f353dc Tue, 05 May 2026 15:38:14 GMT 2026-05-05T15:57:38.729Z <![CDATA[Server Side Template Injection]]>

Leaf challenge

Continue reading on Medium »

]]> https://medium.com/@t4nu1/server-side-template-injection-d60ec217ab5c?source=rss------pentesting-5 https://medium.com/p/d60ec217ab5c Tue, 05 May 2026 15:14:38 GMT 2026-05-05T15:14:38.016Z <![CDATA[What Happens When You Log In to a Website?!]]>

Logging in is something we do every day. It feels instant. Effortless. Normal.

Continue reading on Medium »

]]> https://kavitaa0909.medium.com/what-happens-when-you-log-in-to-a-website-edf8f999aa8d?source=rss------pentesting-5 https://medium.com/p/edf8f999aa8d Tue, 05 May 2026 12:01:27 GMT 2026-05-05T12:01:27.832Z <![CDATA[Zero-Click ATO: How a Single Accent Mark Led to Account Takeovers]]>

Hello hackers, Today I want to share a recent discovery that led to a critical Account Takeover (ATO) vulnerability on a popular platform…

Continue reading on Medium »

]]> https://medium.com/@amendahunt/zero-click-ato-how-a-single-accent-mark-led-to-account-takeovers-6335a965a448?source=rss------pentesting-5 https://medium.com/p/6335a965a448 Tue, 05 May 2026 11:11:00 GMT 2026-05-05T11:11:51.920Z <![CDATA[WordPress Bug Hunting — A Practical Guide]]>

Discover step by step the techniques, tools and strategies to uncover critical vulnerabilities on WordPress sites.

Continue reading on Medium »

]]> https://medium.com/@hackustheinforman/mastering-wordpress-bug-hunting-853e902c9a58?source=rss------pentesting-5 https://medium.com/p/853e902c9a58 Tue, 05 May 2026 10:56:45 GMT 2026-05-05T11:08:21.567Z <![CDATA[HackTheBox Dancing: From Anonymous SMB Access to Root]]>

Welcome back, hackers! Today we are taking a look at Dancing, one of those Windows boxes that rewards calm enumeration more than flashy…

Continue reading on Medium »

]]> https://medium.com/@sobatistacyber/hackthebox-dancing-from-anonymous-smb-access-to-root-7b4017c95248?source=rss------pentesting-5 https://medium.com/p/7b4017c95248 Tue, 05 May 2026 09:26:25 GMT 2026-05-05T09:26:25.420Z <![CDATA[Beyond the Tool Trap: Moving from Automation to Adversarial Thinking]]>

When I first transitioned from full-stack development into the world of cybersecurity, I was convinced that expertise was measured by the…

Continue reading on Medium »

]]> https://medium.com/@arunsridhar.e98/beyond-the-tool-trap-moving-from-automation-to-adversarial-thinking-26e7eb5357e0?source=rss------pentesting-5 https://medium.com/p/26e7eb5357e0 Tue, 05 May 2026 02:56:01 GMT 2026-05-05T02:56:01.270Z