Infosec

While Cloudflare successfully masks the true IP address of a server, some clever tools and techniques, such as CloudSniffer, have been developed to potentially uncover these hidden IPs. …

Greetings, wonderful readers! I trust you’re all happily hacking away in your digital endeavors. My sincerest apologies for my extended absence from the blogosphere — it seems I took an unintended detour. But fear not, for I have returned with a delightful treat: an exhilarating XSS adventure complete with a…

Hello guys, today I’m gonna explain how I got IDOR and exploit it to make account takeover. I have tweeted the entire write-up as a Twitter thread. If you are interested, please follow me on Twitter to receive updates more quickly. I started hunting for vulnerabilities on the BBP at…

NOTE: Here we would be focusing on MedusaLocker RAAS Platform and how it became a major player in the Ransomware Industry. No reversing is included as there are many detailed articles about Malware Analysis out there. Here is a short glimpse of the topics covered in this Article:- 1. INTRODUCTION 2…

A clever text spam, intended to trick Venmo Users. — A text message came in this afternoon, that initially appeared to be from Venmo support. Further review determined it was not an actual Venmo message. A Venmo message comes from the business registered short code, and contains different text.

I was testing a private program on H1 found some vulnerabilities and went back to sleep everything was good. I woke up the next morning looking at the site and notice that they added new functionality. I am going to be one of the first people to test this functionality…

Introduction: In the realm of cybersecurity, social engineering plays a crucial role in assessing vulnerabilities and strengthening defenses. As a security researcher, I am thrilled to introduce Poseidon, a cutting-edge cloud-based social engineering tool designed to take phishing attacks to new heights. In this article, I will delve into the motivation…

Boundary is HashiCorp’s newest product, which enters the privileged access management (PAM) arena for cloud-native, dynamic workloads. …

InfoSecSherpa: Your Guide Up a Mountain of Information! —