Everything you care about in one place
Follow feeds: blogs, news, RSS and more. An effortless way to read and digest content of your choice.
Get Feedermedium.com
InfoSec Writeups - Medium
Get the latest updates from InfoSec Writeups - Medium directly as they happen.
Follow now 112 followers
Latest posts
Last updated 6 days ago
How an Unauthenticated API Endpoint Exposed 19,990 User Records
6 days ago
I Changed One URL Parameter and Found PII Exposed Across 19,990 User...
Proving Grounds — Practice — Authby
6 days ago
AI Image created by https://deepai.org/machine-learning-model/hologram-3d-generatorOffsec’s Proving Grounds Practice box Authby is rated...
Hacker Holidays Day 8 — Do Not Disturb(TryHackMe) Full Writeup
6 days ago
A walkthrough of a multi-stage Node.js/Express box: NoSQL auth bypass → SSTI...
Behavioral Malware Analysis: Investigating a Multi-Stage Malware Sample Inside an Isolated Lab
6 days ago
How I investigated persistence, C2 communications, process injection, and data exfiltration using...
TryHackMe — Guided Pentest: Infrastructure | Full Walkthrough
6 days ago
Room: Guided Pentest: Infrastructure Difficulty: Easy Category: Penetration Testing Tags: Nmap, Metasploit...
Hacker Holidays 2026: Day 6 Walkthrough (Overheard at Breakfast)
6 days ago
A conversation overheard at breakfast leaked an email address. That email led...
Hacker Holidays 2026: Day 7 Walkthrough (Do Not Disturb)
6 days ago
NoSQL injection bypassed the login. Server-Side Template Injection gave us code execution...
Hacker Holidays 2026: Day 8 Walkthrough (Towel on the Sunbed)
6 days ago
A rewards system let you claim 50 points every 24 hours. We...
Hacker Holidays 2026: Day 9 Walkthrough (CryptoCabana)
6 days ago
A hardcoded SAS token in the website’s JavaScript led to a service...
Hacker Holidays 2026: Day 10 Walkthrough (The Hollow Shell)
6 days ago
A file upload accepted ZIP archives but never validated the paths inside...
Escalating a Blind Upload to RCE via Path Traversal into Cron and DNS-Restricted Callback Bypass
9 days ago
RCE Proof1. IntroductionI found an unauthenticated file upload on one of bug...
AWS Cloud Security Challenge: SSRF, IMDSv2, and Cloud Takeover
9 days ago
Hey everyone, It's been a while, and I’m back with an interesting...