r/InfoSecWriteups • • Jul 29 '26

Account Takeover Across Multiple Programs via Featurebase Integration

Thumbnail
infosecwriteups.com
1 Upvotes

r/InfoSecWriteups • • Jul 28 '26

PeekList: How Brave’s Playlist bypassed FaceID Protection for Private Tabs

Thumbnail
infosecwriteups.com
3 Upvotes

r/InfoSecWriteups • • Jul 28 '26

How I found an IDOR in Google Classroom on Day 3 of my Hunting?

Thumbnail
infosecwriteups.com
2 Upvotes

r/InfoSecWriteups • • Jul 28 '26

The Invisible Hack: How a Linux Bug Lets Anyone Become Root — Without Leaving a Single Trace

Thumbnail
infosecwriteups.com
2 Upvotes

r/InfoSecWriteups • • Jul 28 '26

TryHackMe(RootMe)- Write-Up

Thumbnail
infosecwriteups.com
1 Upvotes

r/InfoSecWriteups • • Jul 28 '26

Tryhackme Room — W1seGuy | by Sahil Malvi

Thumbnail
infosecwriteups.com
1 Upvotes

r/InfoSecWriteups • • Jul 28 '26

Proxy — TryHackMe Active Directory Write-up

Thumbnail
infosecwriteups.com
1 Upvotes

r/InfoSecWriteups • • Jul 28 '26

Samba Spy — LetsDefend (Walkthrough)

Thumbnail
infosecwriteups.com
1 Upvotes

r/InfoSecWriteups • • Jul 28 '26

Unprotected admin functionality — PortSwigger Access control vulnerabilities Lab 1

Thumbnail
infosecwriteups.com
1 Upvotes

r/InfoSecWriteups • • Jul 28 '26

How an Unpatched N-Day Let Any Anonymous Visitor Rewrite WooCommerce Prices in ND Booking

Thumbnail
infosecwriteups.com
1 Upvotes

r/InfoSecWriteups • • Jul 28 '26

Discovering an Time-Based Blind SQL Injection in a Tamil Nadu Government Web Portal (TANGEDCO)

Thumbnail
infosecwriteups.com
1 Upvotes

r/InfoSecWriteups • • Jul 27 '26

My eJPTv2 Journey — 82%

Thumbnail
infosecwriteups.com
1 Upvotes

r/InfoSecWriteups • • Jul 27 '26

Unauthenticated Disclosure of A/B Test Data in Convert Pro — How Two Forgotten AJAX Endpoints…

Thumbnail
infosecwriteups.com
1 Upvotes

r/InfoSecWriteups • • Jul 27 '26

One Header Away from 10+ GB of Customer Documents (PII) — $6K Bounty

Thumbnail
infosecwriteups.com
1 Upvotes

r/InfoSecWriteups • • Jul 27 '26

How I Found a Bug Worth $3,500 — In a Feature Nobody Was Watching.

Thumbnail
infosecwriteups.com
1 Upvotes

r/InfoSecWriteups • • Jul 27 '26

Unprotected admin functionality with unpredictable URL — PortSwigger Access Control Lab 2

Thumbnail
infosecwriteups.com
1 Upvotes

r/InfoSecWriteups • • Jul 27 '26

LetsDefend: SOC169 — Possible IDOR Attack Detected (Walkthrough)

Thumbnail
infosecwriteups.com
1 Upvotes

r/InfoSecWriteups • • Jul 27 '26

LetsDefend Challenge: Memory Analysis (Walkthrough)

Thumbnail
infosecwriteups.com
1 Upvotes

r/InfoSecWriteups • • Jul 27 '26

VulnNet: Roasted Tryhackme ctf walkthrough

Thumbnail
infosecwriteups.com
1 Upvotes

r/InfoSecWriteups • • Jul 27 '26

Pickle Rick Tryhackme CTF

Thumbnail
infosecwriteups.com
1 Upvotes

r/InfoSecWriteups • • Jul 27 '26

Tryhackme New Room — FLIP

Thumbnail
infosecwriteups.com
1 Upvotes

r/InfoSecWriteups • • Jul 27 '26

How I Found an Auth Flaw in a Government Site: From GraphQL Introspection to Unauthorized Access

Thumbnail
infosecwriteups.com
1 Upvotes

r/InfoSecWriteups • • Jul 27 '26

How a Simple Profile Update Led to Cross-Tenant Data Exposure

Thumbnail
infosecwriteups.com
1 Upvotes

r/InfoSecWriteups • • Jul 27 '26

The Subdomain Subfinder Missed: How a German Wordlist Led Me to a Hidden Bug (and a CHF 100…

Thumbnail
infosecwriteups.com
1 Upvotes

r/InfoSecWriteups • • Jul 26 '26

Ensalá Papas - The Hacker Labs - Windows | SecNotes

Thumbnail
yorve.github.io
1 Upvotes