infosecwriteups.com — Scour · Scour

infosecwriteups.com

176 posts in the last 30 days

$800 Bounty: Privilege Escalation via API — From Scheduler to Team Admin

infosecwriteups.com

·17h

How To Hack Part 5

infosecwriteups.com

·17h

How to Become a SOC Analyst in 2025 (With Zero IT Experience)

infosecwriteups.com

·17h

When “Safe” Isn’t Safe: Turning a Simple HTML Injection into a Real Security Story.

infosecwriteups.com

·17h

SCP for Data Exfiltration on Pentests

infosecwriteups.com

·17h

Browser Extensions Are the New Malware Dropper

infosecwriteups.com

·17h

One Tool to Rule Them All: File Metadata & Static Analysis for Malware Analysts and SOC Teams

infosecwriteups.com

·17h

Deliberately Vulnerable Android App Covering Every OWASP Mobile Top 10 Class

infosecwriteups.com

·17h

WaTF Bank Walkthrough (Part 2): Exploiting Android App Security Flaws

infosecwriteups.com

·17h

How I Found an Exposed Google Maps API Key in a Production Config File

infosecwriteups.com

·2d

How I Found and Bypassed a Newsletter Confirmation System (IDOR).

infosecwriteups.com

·2d

SSRF Server-Side Request Forgery: Server Ko Apna Agent Banao, Internal Network Explore Karo!

infosecwriteups.com

·2d

Curl Is More Than a Downloader. It’s a Weapon.

infosecwriteups.com

·2d

Katana — Double-Extension PHP Upload Bypass + python2.7 cap_setuid to Root

infosecwriteups.com

·2d

CVE-2026–33032: exploitation allows full control over Nginx server

infosecwriteups.com

·2d

I Read the Claude Code Source Analysis So You Don’t Have To

infosecwriteups.com

·2d

WaTF Bank Walkthrough (Part 1): Exploiting Android App Security Flaws

infosecwriteups.com

·2d

Breaking Email Trust: How I Bypassed Email Verification in a Real-World Application.

infosecwriteups.com

·2d

Apple Knows. Visa Knows. Nobody Has Fixed It. Here’s Why.

infosecwriteups.com

·3d

Instagram Scraper Broke 12 Times in 6 Weeks: A Maintenance Postmortem

infosecwriteups.com

·3d

Log in to enable infinite scrolling