Infosec

I was testing a private program on H1 found some vulnerabilities and went back to sleep everything was good. I woke up the next morning looking at the site and notice that they added new functionality. …

Hello to all security researchers and esteemed bounty hunters. Welcome to my second write-up. I hope you find it enjoyable. As you can see in the title, the vulnerability I discovered relates to bypassing Rate Limit, which leads to account takeover. The vulnerability I discovered involves the unauthorized takeover of…

This isn’t really a walkthrough as much as it is me venting, complaining and praising the platform TryHackMe. Before I dive into the room at hand I thought I would share a little background. I decided to pivot into cybersecurity early 2023 due to a failed real estate business after…

InfoSecSherpa: Your Guide Up a Mountain of Information! —

A fast, parallelize, network logon cracker that assists pentester and ethical hackers in cracking passwords of network services. Welcome back, my friends. Today, we’re going to explore the Hydra room, here. It is a free room, meaning that no subscription is required to access it! Let’s start now.

InfoSecSherpa: Your Guide Up a Mountain of Information! — Tokio Marine Kiln Sets Up Cyber & Enterprise Risk Division (Insurance Journal, June 5th) How to Boost Cybersecurity Through Better Communication (Security Intelligence, June 5th) Automation is no longer the future of cybersecurity: It’s the present (Security, June 5th) NHS England reports new Capita data breach (UK AuthorITy, June 5th) North Korea Makes 50% of Income from Cyber-Attacks: Report (InfoSecurity, June 5th)

Imagine that you have received a link to some website, probably looking similar to your favorite or popular one. Is it official and legal or may it lead an innocent user to a phishing page? The risk of being infected by a virus by inadvertently downloading malware is notoriously frequent…

Everyone wants to apply this or that tool to solve the latest security problem vendors say you have. That doesn’t mean you have that problem, nor does it mean a tool is the right approach. Instead, we need to remember that people are at the heart of security. When I…

Released documents show a tense relationship between Canadian Intelligence agencies and their government-appointed watchdog organization. — According to recently disclosed documents, there has been a notable strain in the relationship between the intelligence community and its primary oversight body over the past year, resulting from significant resistance to scrutiny. The findings were revealed in briefing materials that were prepared for Canada’s highest-ranking public servant ahead of…