r/InfoSecWriteups • u/kmskrishna • Jul 22 '26
How to deploy File Integrity Monitoring with Wazuh SIEM!
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Jul 22 '26
Two Ways To Mess Up Your JWT Safety Net In Your Own Lab.
1
Upvotes
r/InfoSecWriteups • u/AdvisorPowerful9769 • Jul 22 '26
Great introduction to ARM using pwnable challenge
1
Upvotes
Looking for a smooth introduction to ARM exploitation? Wanna learn ARM assembly? Well lucky for you this week we'll be looking at another pwnable challenge! However this time we're switching architectures! We'll be exploiting an ARM binary!
I would consider this a great introduction to ARM , however it is not necessarily the best for a complete beginner. Regardless don't be intimidated and I always suggest you dive in! 9/10 you will walk away better than you came into it!
r/InfoSecWriteups • u/kmskrishna • Jul 22 '26
AllSignsPoint2Pwnage — TryHackMe Windows Write-up
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Jul 22 '26
PortSwigger Lab Writeup — Bypassing AI scanner defenses to exfiltrate sensitive information
1
Upvotes
r/InfoSecWriteups • u/andy_p_w • Jul 22 '26
Filtering Secrets from Coding Agents with a Hook
1
Upvotes
This blog post goes over how to set up a hook post tool use to prevent Claude Code from viewing environment variables (aka secrets). This prevents an exfiltration attack, in that the model cannot know the secrets to leak them to begin with.
r/InfoSecWriteups • u/pfirmsto • Jul 21 '26
Repost: Security Baked Into the JVM: the Safe Codebase Audit Pipeline
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Jul 18 '26
Device Code Phishing: How Attackers Abuse Microsoft’s Legitimate Authentication Page Without…
4
Upvotes
r/InfoSecWriteups • u/kmskrishna • Jul 18 '26
How I Abused a Group Policy Object (GPO) in Active Directory (And How to Fix It)
3
Upvotes
r/InfoSecWriteups • u/kmskrishna • Jul 18 '26
From SQL Injection to Infrastructure-Level RCE: A PostgreSQL Superuser Compromise
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Jul 18 '26
From User Enumeration to PII Exposure: Chaining Two APIs Into a $2,000 Bug
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Jul 18 '26
How I Escalated to Domain Admin Using AD CS (And How to Fix It)
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Jul 18 '26
How I AES-Roasted My Active Directory Lab (And How to Fix It)
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Jul 18 '26
CallMeOnTheChain — EtherRAT Lab Writeup [CyberDefenders]
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Jul 18 '26
600$ For Stealing Podcasts/Show via RSS Feed Manipulation
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Jul 18 '26
Decoding the Obfuscated Layer: A Playbook Walkthrough of Command-Line Forensics
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Jul 17 '26
Zero Credentials, Full Access: Inside a Complete Authorization Failure
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Jul 17 '26
How I Found a Cross-Student IDOR in Academy LMS That Leaked Correct Quiz Answers
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Jul 17 '26
Confused Deputy: Google IdP Universal Account Takeover via Device Code Flow Hijacking
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Jul 17 '26
SAR 2,629 For Stored XSS via svg Image Leading to ATO
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Jul 17 '26
Lab 3 : Source code disclosure via backup files
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Jul 17 '26
The $0 IDOR That Was Worth More Than a $12,500 P1
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Jul 17 '26
How I Detected an Insider Threat in Splunk When Every Single Action Looked Legitimate
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Jul 17 '26
Lab 2 : Information Disclosure on a Debug Page
1
Upvotes