[+] 403 bypass methodology !

1- using space symbols
exmaple:
/admin -> 403
/admin%09 -> 200
/admin%20 -> 200

2- use traversal
Example:
/admin -> 403
/..;/admin -> 200

you can fuzz with traversal sometimes that's end with results

Example: /..;/FUZZ

🚀…

🚨 URGENT: Second Windows Exploit of the Year – PoC for CVE-2024-43452 Released 🚨

Less than 10 days into the new year, and we already have the second major Windows exploit to contend with. A Proof of Concept (PoC) exploit has been published for CVE-2024-43452…

🚨 Critical Vulnerability in WordPress Hunk Companion Plugin (CVE-2024-11972, CVSS: 9.8) 🚨
-
A newly discovered critical flaw in the Hunk Companion plugin for WordPress could allow attackers to silently install malicious or outdated plugins, leading to Remote…

🚨 Apache Tomcat Vulnerability (CVE-2024-56337): RCE Risk Alert 🚨
-
Users running Tomcat on a case insensitive file system with the default
servlet write enabled (readonly initialisation parameter set to the
non-default value of false) may need additional…

La Agencia de Seguridad de Infraestructura y Ciberseguridad de Estados Unidos (CISA) agregó el martes tres fallas que afectan a Mitel MiCollab y Oracle WebLogic Server a su catálogo de vulnerabilidades explotadas conocidas ( KEV ), citando evidencia de explotación…

🎙️ ¡Estamos en vivo! 🎙️
Únete ahora a nuestra entrevista exclusiva con Christian Urcuqui López, un reconocido experto en #ciberseguridad , speaker internacional y autor de referencia en la industria. 🌍🔐
Durante esta conversación, exploraremos la ciberseguridad…

⚠️ Samsung Devices at Risk (CVE-2024-49415)

🔴 No user interaction required – A zero-click exploit in Samsung’s Monkey's Audio decoder allows attackers to remotely execute arbitrary code on affected devices.

📌 What’s the issue?
An out-of-bounds write in…

Todd Schell: ¡Bienvenidos a 2025 y a un nuevo año de entusiasmo por los parches! En este artículo, hablé sobre la Iniciativa de futuro seguro ( SFI ) de Microsoft y cómo se manifestó en muchos de los productos de Microsoft lanzados en 2024. Si bien esta tendencia…

#Bypass Elastic EDR with PowerShell ISE: PoC and Recommendations
I demonstrate how to bypass Elastic EDR using techniques that also work with an updated Defender, leveraging basic PowerShell methods.
🔍 How does it work?
1️⃣ Neutralizing AMSI: We overwrite…

Not all heroes wear capes, but these ones sure do 🦸
Here's why you might consider #HTB CAPE, our latest advanced certification, as your next upskilling…

Offensive Security Tool: XSRFProbe

XSRFProbe, developed by Pinaki Mondal, is an advanced Cross-Site Request Forgery (CSRF/XSRF) auditing and exploitation toolkit. Equipped with a powerful crawling engine and systematic checks, it can detect most CSRF vulnerabilities…

500 million+ members | Manage your professional identity. Build and engage with your professional network. Access knowledge, insights and opportunities.

🚨 Top 100 Web Vulnerabilities You Must Know! 🚨
Understanding web vulnerabilities is crucial for building secure applications and defending against cyber…

500 million+ members | Manage your professional identity. Build and engage with your professional network. Access knowledge, insights and opportunities.

Strong signal, weak security 🫢
Jump into a new #HTB Academy Module that will teach you how to uncover vulnerabilities in WPA/WPA2 networks. Learn how attackers exploit weaknesses in both home and enterprise environments now: https://okt.to/4p1xO9

#HackTheBox…

🚨 Warning for Security Teams: LDAPNightmare CVE-2024-49113 Fake PoC Exploit Targets Security Researchers 🚨

As the dust settles on CVE-2024-49113 (“LDAP Nightmare”), attackers have devised a cunning new strategy to exploit the buzz around this vulnerability.…

🔥 NEW BLOG POST

In this blog, I'll explore Spy Note Android spyware. It was firstly discovered back in 2017 that has many RAT capabilities which includes:
-…