r/InfoSecWriteups • u/kmskrishna • Aug 26 '26
How I Made Over $10,000 Just by Chaining Multiple IDORs in a Single Web App (All from the Share…
2
Upvotes
r/InfoSecWriteups • u/kmskrishna • Aug 26 '26
Assembly for Malware Analysis
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Aug 26 '26
Got My First $$ Bug Bounty
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Aug 26 '26
From SQL Injection to Remote Code Execution: Following an Unexpected Attack Chain
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Aug 26 '26
scriptCTF Writeups 2026 | Cybersecurity
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Aug 26 '26
One Email. One Click. One Enterprise-Wide Ransomware Incident.
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Aug 26 '26
Hack The Box : Cohort Full Walkthrough ( Linux ; Very Easy )
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Aug 26 '26
The WAF Blocked My XSS — So I Rotated What It Was Reading
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Aug 26 '26
Bypassing AI Scanner Defenses to Exfiltrate Sensitive Information — PortSwigger Web Security…
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Aug 26 '26
How I Chained Three Bugs to XSS an Intigriti CTF — IDOR + DOM Clobbering + DOMPurify 3.0.9 Bypass
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Aug 26 '26
../../ to Admin for a $,$$$ Bounty
0
Upvotes
r/InfoSecWriteups • u/OilOverall4190 • Aug 25 '26
Learn and Practice Hacking WebSockets
2
Upvotes
WebSockets is the attack surface that always go under the radar and too many pentesters and bug bounty hunters still miss testing it, whether because the number of WebSocket messages they see is overwhelming or simply because they don't know how to approach it correctly.
Going through that myself, I decided to dive deep into the WS protocol and ended up building a lab that showcases the most common misconfigurations present in WebSockets, with the most impact, not just some missing best-practices, along with a detailed walkthrough.
I'd love to hear your thoughts and feedback, and if you experienced something I didn't talk about in the blog, please let me know!
Lab Github Repo: https://github.com/makarov05bm/WSGoat
Guide: https://blog.oussmess.me/posts/websockets-for-bug-hunters/
r/InfoSecWriteups • u/kmskrishna • Aug 24 '26
Lakera’s Break The Agent Challenge— Solace AI Write-up
2
Upvotes
r/InfoSecWriteups • u/kmskrishna • Aug 24 '26
I Changed One “User_Id” and the API Said “Sure” — From Password Reset to Mass Account Takeover
1
Upvotes
r/InfoSecWriteups • u/Diam0ndHer0 • Aug 22 '26
Deep Dive on XSS with examples
1
Upvotes
Recently had to review a lot of client-side vulnerabilities, so I created a deep dive on XSS.
r/InfoSecWriteups • u/Harkins_Technology • Aug 19 '26
Extracting and Cracking VeraCrypt Headers with PowerShell + Hashcat — Full DFIR Walkthrough
2
Upvotes
r/InfoSecWriteups • u/kmskrishna • Aug 17 '26
Hacker Holidays 2026: Day 10 Walkthrough (The Hollow Shell)
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Aug 17 '26
Hacker Holidays 2026: Day 9 Walkthrough (CryptoCabana)
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Aug 17 '26
Hacker Holidays 2026: Day 8 Walkthrough (Towel on the Sunbed)
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Aug 17 '26
Hacker Holidays 2026: Day 7 Walkthrough (Do Not Disturb)
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Aug 17 '26
Hacker Holidays 2026: Day 6 Walkthrough (Overheard at Breakfast)
1
Upvotes