Oh boiii @HuskyHacksMK had me for a moment. I thought I was not gonna solve today. But after solving his challenges there is always this sense of achievement. He is the best♥️

Now swag please 🤝♥️

I called a forensics guy. Owned🫡

you will be safe, I checked it. A nice flag will be printed though🫶

It can be very unsettling when a sentence doesn’t end in the way that you potato. - Robert Sapolsky

payatu.com/blog/pentestin…

🔎 Delve into the process of testing Linux thick client applications to identify and address potential security vulnerabilities with this blog by our #Bandit - Avinash kumar Read more at ➡️ payatu.com/blog/pentestin… #InfoSec #ApplicationPentesting

I wrote a hacker roadmap with my personal experience. Becoming a Hacker: A Personal Narrative and a Roadmap github.com/msrkp/hacker-r… Please let me know if you have suggestions to improve. I will be sharing with people around me.

Check out this blog for insights on testing challenges, attack vectors, and tools used for securing Linux thick client apps. 🔗 payatu.com/blog/pentestin…

How I hacked chess.com with a rookie exploit : skii.dev/rook-to-xss/

In case you missed it...I wrote a book, please support my work by buying a copy. If you've already bought one thank you, please can you RT to spread the word! leanpub.com/javascriptforh…

When you connect to your organization's VPN your public IP changes. But when you connect to hackthebox, tryhackme VPN why your public IP remain same?? Can they monitor your n/w? I am enjoying Hack The Box Introduction to networking module and learning interesting things ♥️♥️

How an empty S3 bucket can make your AWS bill explode medium.com/@maciej.pocwie…

"The pressure to be unique is just exhausting and counterproductive. Instead of chasing uniqueness, why not embrace conformity? Here’s why it’s the smarter choice", Benoit Malige. hackernoon.com/standing-out-i…

Upgrade your SSRF, CORS & Open Redirect testing with our new URL Validation Bypass cheat sheet, containing all known techniques! portswigger.net/web-security/s…

Can't trust any VPN these days blog.orhun.dev/cant-trust-any…

Learned a new thing will definitely keep this in mind while testing CSRF issues in future.

We hacked Gemini CLI, Vertex AI, Assistant, and other AI systems by embedding prompts into images that are not visible to users.