Discover how polyglot files, capable of being recognized as multiple file types, pose unique challenges to cybersecurity efforts, and learn…

Hello hackers, I’ll share an interesting bug in a private program in this write-up.

Server side template injection

Hello evreyone, I developed a simple lab with intentional security vulnerabilities.

€75 direct access to server’s panel.

A seamless journey of career growth @Appsecco, remotely working as a security intern.

Me and the Internship

Disclaimer: This article is written for educational purposes, the author and Appsecco does not encourage readers to do engage in…

Attached is the PDF of how I managed to escalate privileges to staff/superuser privileges via a misconfiguration. Django Privilege Escalation – Zero To Superuser

This is from a private bounty. The internal —-private.com domain was out of scope so I was asked to stop testing once I found the bug. SSRF To Pivot Internal Networks