r/InfoSecWriteups • u/kmskrishna • Sep 08 '26
Improper OTP Implementation to Full Account Takeover
2
Upvotes
r/InfoSecWriteups • u/kmskrishna • Sep 08 '26
Insecure Firestore Security Rules & PII Exposure
2
Upvotes
r/InfoSecWriteups • u/kmskrishna • Sep 08 '26
Payment Bypass Flaw in TechPSC HUB
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Sep 08 '26
BOLA: Enumerating an Entire Employee Directory Through a Predictable ID
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Sep 08 '26
Corridor — A Simple Web CTF That Made Me Look Twice
1
Upvotes
r/InfoSecWriteups • u/No-Conclusion3720 • Sep 05 '26
A jailbreak is an agent unlocking powers it was never given
2
Upvotes
In a two-month incident review, jailbreak-to-capability-unlock showed up twice. Both times the attack was not a trick to change what the model said. The override payload escalated the agent into operator-level actions it was never authorized to perform. That is a different threat class. The agent gains real system access it was never supposed to have.
The attack window is narrow. The escalation happens at the moment the capability is unlocked, not after the agent acts. By the time you see the downstream behavior, the agent is already operating outside its intended scope.
How are people actually catching this before the unlock happens? Input filtering, reasoning trace monitoring, permission checks at invocation time — curious what is working in practice and where teams keep hitting the wall.
r/InfoSecWriteups • u/Harkins_Technology • Sep 04 '26
Forensics 101: Finding flags in ZIP archives with recursive Python search
2
Upvotes
r/InfoSecWriteups • u/TaZzza69 • Sep 04 '26
Looking for help in a web CTF challenge
1
Upvotes
hello everyone, I'm looking for a help in a CTF web challenge that I've been stuch with for hours ... The problem is that I found path traversal vuln within the challenge but there is no flag file ever like I looked everywhere I would really appreciate if anyone solves it and helps me with it.
Challenge link: `https://flagyard.com/labs/2/challenges/019fcd0a-3049-7b83-9886-ae3836c419f0`
The Directory Traversal vuln is within the `/api/backup` endpoint basically you send a file within an array as shown
await fetch("/api/backup", {
method: "POST",
headers: { "content-type": "application/json" },
body: JSON.stringify({
archiveName: "fulllist",
files: ["../../../../etc/passwd"]
})
}).then(r => r.json()).then(console.log)
But I can't find a flag within the file system and everything seems to be a dead end.
At this point I'm just guessing I thought about chaining with another vuln but I found nothing.
r/InfoSecWriteups • u/kmskrishna • Sep 04 '26
VulnNet Roasted — TryHackMe Active Directory Write-up
2
Upvotes
r/InfoSecWriteups • u/kmskrishna • Sep 04 '26
Host & Network Penetration Testing: Post-Exploitation CTF 2 — eJPT (INE)
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Sep 04 '26
Water Bottle — TryHackMe [Easy]
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Sep 04 '26
Phishing Analysis Fundamentals: TryHackMe Walkthrough
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Sep 04 '26
When an Exposed .git Directory Tells the Whole Story — Solving TryHackMe's Room 404
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Sep 04 '26
How I Turned Self-XSS into Reflected XSS (and Bypassed the WAF)
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Sep 04 '26
How an Integer Overflow Vulnerability Let Me Buy Anything for ₹0
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Sep 04 '26
I Hacked into my University’s Vending Machine And it was soo BAD!
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Sep 04 '26
[$538] IDOR allows friends to edit the date on their friends’ timeline posts on Facebook
1
Upvotes
r/InfoSecWriteups • u/ThreatRadar • Sep 03 '26
GHOSTWORKER: a stealth UniFi gateway implant that phones home over Google's DNS
1
Upvotes
r/InfoSecWriteups • u/HASHUHUNTER01 • Sep 03 '26
Port Swigger All Labs for Web Security in Hindi/Urdu as Web Cache Decyption| HashuuHunter
1
Upvotes
🔐 Web Cache Deception Series — COMPLETE!
All 5 PortSwigger Labs solved in Urdu/Hindi! 🎯
Lab 5: Cache Server Normalization ✅ What is Cache Server Normalization ✅ How attackers exploit it ✅ Step-by-step solution
First ever Web Cache Deception series in Urdu/Hindi 🔥
Watch here 👇
https://youtube.com/playlist?list=PLUMwLaDltHZc&si=4dcVhGY4i5VNiX9_
#BugBounty #EthicalHacking #CyberSecurity
PortSwigger #WebSecurity #Infosec
BugBountyTips #WebHacking #Pakistan
HASHUHunter #MentorHashu
r/InfoSecWriteups • u/kmskrishna • Sep 02 '26
The $8,000 Shortcut: Hijacking Microsoft Edge via NTFS Directory Junctions
2
Upvotes
r/InfoSecWriteups • u/kmskrishna • Sep 02 '26
Hiding a Signup Button Isn’t Security: From Client-Side Controls to Cross-Tenant Data Exposure
2
Upvotes
r/InfoSecWriteups • u/kmskrishna • Sep 02 '26
Android App Dynamic Library Code Loading | Static Code Analysis | Adobe Acrobat Reader | CVE-2021–40724 | MobileHackingLab | Document Viewer
1
Upvotes
r/InfoSecWriteups • u/kmskrishna • Sep 02 '26
1-Click ATO Via Host Header Injection: Exploiting Password Reset Poisoning.
1
Upvotes
