Ethical Hacking

Hello, my savvy hackers. Today, we will explore the process of exploiting the content provider in a vulnerable application called “Diva.” Before we begin, let’s refresh our understanding of the basics. What exactly is a content provider in an Android application? A content provider is one of the fundamental components…

In today’s digital age, cybersecurity plays a crucial role in protecting sensitive information and ensuring the integrity of online systems. As the demand for skilled cybersecurity professionals continues to rise, it becomes increasingly important to specialize in specific fields to develop expertise. In this article, we will explore the significance…

Attention white Hats! A new challenge awaits you. Raft Finance has just launched a bug bounty program on Hats! This means that security researchers can earn generous rewards from a 2.5M $TEMP pool for their valuable efforts in the security space. With our scalable and permissionless framework, bug bounty rewards…

Introduction In this article, we delve into the intriguing realm of penetration testing by exploring the process of exploiting FTP Port 21 on the renowned vulnerable virtual machine, Metasploitable 2. Metasploitable 2 is intentionally designed to be susceptible to various attacks and is a resource for security professionals to enhance…

Ethical hacking OTP bypass via response manipulation Hello Hacker, I’m glad you’re back on my other blog. This time, I discovered my most recent finding on a private bug bounty programme. The vulnerability I discovered is the OTP bypass via response manipulation. What is OTP bypass via response manipulation? OTP (One-Time Password) bypass via response manipulation refers…

Introduction: The world of bug bounty hunting presents exciting opportunities for individuals to leverage their technical skills and contribute to the security of digital systems. However, achieving success in this field requires more than just technical expertise; it demands a well-rounded approach and a relentless pursuit of knowledge. …

Introduction Wireshark is a powerful network analysis tool that captures and analyzes network traffic. This article will walk you through capturing an image packet using Wireshark and saving it as a JPEG file. …

Introduction Another blast from the past! This box is several years old but I decided to revisit a few windows boxes in preparation for the OSCP exam. This challenge covers some of the basic essentials of windows enumeration using rpc, smb, DNS and Active Directory. Techniques and Vulnerabilities covered: Anonymous access…

Welcome back to Cyber Tsunami’s “Unleashing Kali Linux” series! Today, we dive deep into the dark and powerful world of the Metasploit Framework. As one of the most renowned and formidable penetration testing tools, Metasploit is the sword that cyber warriors wield to exploit vulnerabilities and fortify defenses. …