Posts
All the articles I've posted.
HTB Caption walkthrough: Exploit GitBucket default creds, abuse H2 DB for RCE, and escalate to root using a Thrift log parser vulnerability.
In this write-up, we walk through the CICADA box on HTB from user enumeration and credential stuffing to full domain compromise using SeBackupPrivilege.
Discover how Host Header Injection works, its risks, real-world attack examples, and steps to secure your web applications from this hidden threat.
NoSQL injection is a vulnerability where an attacker is able to interfere with the queries that an application makes to a NoSQL database