5k Clickjacking, Encryption Oracles, and Cursor for PoCs

Critical Thinking Podcast: Episode 90

Why Windhustler Left Kotlin Behind to Make Money in Crypto Auditing

Web3 Security Podcast

NahamSec talks us through fast Recon and more.


This is The Fastest Hacking & Recon Tool

Web3 Security Podcast talking to Shashank about SolidityScan

Shashank raised $1M and built his product SolidityScan

Vendors have started implementing advanced detections. Is it enough to prevent determined attackers? Here's a deep dive into bypassing modern anti-phishing.

A Smooth Sea Never Made a Skilled Phisherman

SSRF is a critical security vulnerability that can wreak havoc if not properly addressed.

Understanding and Preventing Server-Side Request Forgery

Understanding Request Smuggling

While auditing web applications, we realized that Client Side Path-Traversal (CSPT) can be actually leveraged to resuscitate CSRF for the joy of all pentesters.

Client-Side Path Traversal to Cross-Site Request Forgery

You might have heard about one-liners that scan all subdomains and finds XSS for you effortlessly. Well, sorry to burst your bubble, but there’s no such thing. 

Effective XSS methodology : The true way to hunt XSS

A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to conduct an SSRF attack on an affected system.

Cisco Finesse Server Side Request Forgery (CVE-2024–20404)

AI is a powerful tool almost everyone uses nowadays. That’s why I just decided to test and see if AI or ChatGPT can find vulnerabilities.

Browse Web Content

Discover the best Web pentesting and infosec content, updated every day.