Phone Numbers and Emails to Hidden Subdomains: The OSINT Acquisition Pipeline That Uncovered a… A deep technical blog on using phone numbers and email addresses to discover hidden domains, subdoma... 2026-6-19 10:56:2 | 阅读: 80 | 收藏 | InfoSec Write-ups - Medium - infosecwriteups.com github healthtech payflow subdomain jq

Brave Blue Team Lab (CyberDefenders) You can read this writeup on my GitBook account LinkScenario:A memory image was acquired from a susp... 2026-6-19 10:54:19 | 阅读: 64 | 收藏 | InfoSec Write-ups - Medium - infosecwriteups.com windows volatility brave network memory

CRTA Exam Writeup — Passed | CyberWarFare Labs Press enter or click to view image in full sizeCertification: CRTA (Certified Red Team Analyst) Issu... 2026-6-19 10:54:14 | 阅读: 438 | 收藏 | InfoSec Write-ups - Medium - infosecwriteups.com ssrf 23100 hostfs ssh network

Web-RTA Exam Writeup — Passed | CyberWarFare Labs IntroductionThe Web-RTA (Web Red Team Analyst) certification by CyberWarFare Labs is a fully hands-o... 2026-6-19 10:54:6 | 阅读: 146 | 收藏 | InfoSec Write-ups - Medium - infosecwriteups.com otp username client ssrf captcha

VulnHub — sunset: dawn | Full Walkthrough Overviewsunset: dawn is a beginner-to-intermediate VulnHub machine and the second entry in the sunse... 2026-6-19 10:53:57 | 阅读: 83 | 收藏 | InfoSec Write-ups - Medium - infosecwriteups.com dawn itdept pwnkit zsh linpeas

Slort — RFI via PHP allow_url_include + Writable Scheduled Task Binary to Administrator | OffSec PG… Slort is a Windows machine that chains a PHP remote file inclusion vulnerability with a world-writab... 2026-6-18 06:49:7 | 阅读: 91 | 收藏 | InfoSec Write-ups - Medium - infosecwriteups.com php windows backup tftp xampp

“Bug Bounty Bootcamp #47: Account Takeover 101 — How to Steal Everyone’s Account (Legally)” You don’t need to be a hacker in a hoodie. Just a missing IDOR, a leaky invite link, or a mass-assig... 2026-6-18 06:47:27 | 阅读: 72 | 收藏 | Bug Bounty in InfoSec Write-ups on Medium - infosecwriteups.com mass idor hoodie linkwelcome symphony

“Bug Bounty Bootcamp #47: Account Takeover 101 — How to Steal Everyone’s Account (Legally)” You don’t need to be a hacker in a hoodie. Just a missing IDOR, a leaky invite link, or a mass-assig... 2026-6-18 06:47:27 | 阅读: 80 | 收藏 | InfoSec Write-ups - Medium - infosecwriteups.com mass idor assignable symphony suddenly

Build an IDOR Vulnerability Lab: Why WHERE Clauses Don’t Protect Your API. Press enter or click to view image in full sizeLast time we covered SQL injection. I promised IDOR w... 2026-6-18 06:47:4 | 阅读: 56 | 收藏 | InfoSec Write-ups - Medium - infosecwriteups.com username requireauth lender alice database

BEARCAT CTF 2026 WRITEUPS Flag Format: BCCTF{}#1.RIVER RAIDER (OSINT)For this challenge, we were given a picture of a rogue pi... 2026-6-18 06:46:37 | 阅读: 64 | 收藏 | InfoSec Write-ups - Medium - infosecwriteups.com bcctf quine globals river dangling

I almost ordered a product for free. (Business Logic Vulnerability) How does it sound that you ordered something and almost got it for free? Wouldn't that make you happ... 2026-6-18 06:46:25 | 阅读: 61 | 收藏 | InfoSec Write-ups - Medium - infosecwriteups.com quantity 177 manipulated comprdqty qty

Building a Hackbot for Bug Bounties — Auth Testing Subagent Setup If you have been keeping up with the current state of Bug Bounties on X, you probably heard that som... 2026-6-18 06:45:33 | 阅读: 67 | 收藏 | Bug Bounty in InfoSec Write-ups on Medium - infosecwriteups.com claude agents mcp hackbot

Building a Hackbot for Bug Bounties — Auth Testing Subagent Setup If you have been keeping up with the current state of Bug Bounties on X, you probably heard that som... 2026-6-18 06:45:33 | 阅读: 56 | 收藏 | InfoSec Write-ups - Medium - infosecwriteups.com claude mcp agents hackbot

“Bug Bounty Bootcamp #46: Not Allowed From Your IP?” — How to Spoof, Brute-Force, and Mass-Assign Your Way Past Authentication Walls”Press enter or click... 2026-6-18 06:45:26 | 阅读: 59 | 收藏 | Bug Bounty in InfoSec Write-ups on Medium - infosecwriteups.com spoof sso approval inject

“Bug Bounty Bootcamp #46: Not Allowed From Your IP?” — How to Spoof, Brute-Force, and Mass-Assign Your Way Past Authentication Walls”Press enter or click... 2026-6-18 06:45:26 | 阅读: 48 | 收藏 | InfoSec Write-ups - Medium - infosecwriteups.com spoof sso inject approval

TryHackMe — Blog CTF | Full Write-Up Press enter or click to view image in full size“Billy Joel made a blog on his home computer and has... 2026-6-18 06:43:47 | 阅读: 80 | 收藏 | InfoSec Write-ups - Medium - infosecwriteups.com wordpress bjoel wp kwheel billy

VulnHub — Shenron: 1 | Full Walkthrough OverviewShenron: 1 is a beginner-to-intermediate VulnHub machine built around a misconfigured Joomla... 2026-6-18 06:43:39 | 阅读: 76 | 收藏 | InfoSec Write-ups - Medium - infosecwriteups.com shenron joomla linpeas ssh 3156

I Pentested a Real CRM System and Found 4 Critical Vulnerabilities — Here’s the Full Attack Chain Press enter or click to view image in full sizeDisclosure Notice: This assessment was conducted with... 2026-6-18 06:43:28 | 阅读: 66 | 收藏 | Bug Bounty in InfoSec Write-ups on Medium - infosecwriteups.com database supabase instructor anon

I Pentested a Real CRM System and Found 4 Critical Vulnerabilities — Here’s the Full Attack Chain Press enter or click to view image in full sizeDisclosure Notice: This assessment was conducted with... 2026-6-18 06:43:28 | 阅读: 67 | 收藏 | InfoSec Write-ups - Medium - infosecwriteups.com database supabase anon instructor

Host & Network Penetration Testing: Network-Based Attacks CTF 1 — eJPT (INE) A beginner-friendly Wireshark PCAP analysis walkthrough — identifying a malware infection through ne... 2026-6-16 06:53:44 | 阅读: 62 | 收藏 | InfoSec Write-ups - Medium - infosecwriteups.com expanded powershell searched carefully network