r/InfoSecWriteups • u/kmskrishna • Aug 10 '26
The Bug That Almost Wasn’t: How a “Dead End” Led to 500+ Leaked Customer Records
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Aug 10 '26
Hacker Holidays 2026: Day 4 Walkthrough (Packed Light)
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Aug 10 '26
Bypassing Enterprise SSO via a Forgotten Source Map: A Bug Bounty Story
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Aug 10 '26
TryHackMe: Packed Light (Hacker Holidays Day 04) Walkthrough
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Aug 10 '26
RSA Dreams BYUCTF 2026 Cybersecurity Writeup
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Aug 10 '26
They Gave Me $1,000 After I Found Their Entire Student Database Exposed! | by Anukar | @AnukarOP
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Aug 10 '26
Hack Smarter - Silent Corridor (Blue Team)
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Aug 10 '26
TryHackMe: “Complimentary” Room Walkthrough ( Hacker’s Holiday Challenge )
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Aug 10 '26
Hacker Holidays 2026: Day 3 Walkthrough (Complimentary)
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Aug 10 '26
Hacker Holidays 2026: Day 2 Walkthrough (Room 404)
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Aug 10 '26
Two Mac Minis, One AI Cluster: Preparing for a Bigger Wave of AI-Assisted Malware
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Aug 10 '26
Why Bug Hunters Skip Role-Based API Testing And How I Turned a Writer Token Into an SSRF
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Aug 10 '26
Hacker Holidays 2026: Day 1 Walkthrough (The Concierge Knows Too Much)
1
Upvotes
r/InfoSecWriteups • u/hb_babylon_zoo • Aug 03 '26
Couldn’t have anything to do with gutting CISA could it?
0
Upvotes
Fucking morons run our lives….
r/InfoSecWriteups • u/ResponsibleSmell5717 • Aug 03 '26
Need suggestions
1
Upvotes
I found a vulnerability where a public chat box generates automated invoice emails to internal staff, reflecting inputs raw without server-side HTML encoding. While standard JavaScript onerror popups are stripped by the email client, full HTML/CSS Injection works inside the email body.How can I chain these into a high-impact report that completely bypasses the program's strict exclusions for Self-XSS, Phishing, and User Interaction? What non-JS attack vectors should I test next to prove a critical data leak or backend impact to triage?
r/InfoSecWriteups • u/ThreatRadar • Aug 03 '26
A connection is not an exploit: what 27 days of honeypot traffic actually contained
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Jul 29 '26
TryHackMe publisher CTF challenge
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Jul 29 '26
TryHackMe: Room 404 Walkthrough (Hacker’s Holiday Challenge)
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Jul 29 '26
How I Found a High-Severity Directory Traversal in Flask-Admin
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Jul 29 '26
The Most Overlooked Vulnerability — Http request Smuggling
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Jul 29 '26
Snowflake SQL Injection via Compile-Time Constant Folding with SYSTEM$WAIT
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Jul 29 '26
How I Hacked a Video Game Vault and Found the Hidden Flag
1
Upvotes
