Splunk Exploring SPL: A Practical SOC Analyst Walkthrough for Search, Detection, and Threat Hunting Hands-on Splunk SPL walkthrough covering searching, filtering, structuring, transforming, enrichment... 2026-6-7 14:42:23 | 阅读: 35 | 收藏 | InfoSec Write-ups - Medium - infosecwriteups.com windowslogs logins spl stdev

I Became Admin on a CTF Platform A few weeks ago I was poking around CTF platform. What I found was a pretty embarrassing vulnerabili... 2026-6-7 14:41:53 | 阅读: 34 | 收藏 | Bug Bounty in InfoSec Write-ups on Medium - infosecwriteups.com participant client adminpress database sizerule

How I Hijacked a CTF Platform with Four Lines of Burp Suite Rules A few weeks ago I was poking around CTF platform. What I found was a pretty embarrassing vulnerabili... 2026-6-7 14:41:53 | 阅读: 35 | 收藏 | InfoSec Write-ups - Medium - infosecwriteups.com participant client adminpress database sizerule

Sensitive Information Disclosure Through an Exposed File Repository. Press enter or click to view image in full sizeBy kjuliusIntroduction.One of the things I enjoy most... 2026-6-7 14:40:50 | 阅读: 32 | 收藏 | InfoSec Write-ups - Medium - infosecwriteups.com security subdomain sizeproof stories reveal

An Introduction to Module Stomping Overwriting DLLs for Windows Process InjectionBackgroundContextIn modern adversary emulation, generi... 2026-6-7 14:40:30 | 阅读: 34 | 收藏 | InfoSec Write-ups - Medium - infosecwriteups.com stomping windows injection memory wininet

I Started Learning AWS and Realised I Didn’t Fully Understand the Internet Press enter or click to view image in full sizeMy journey into cloud computing and the concepts that... 2026-6-5 06:43:40 | 阅读: 39 | 收藏 | InfoSec Write-ups - Medium - infosecwriteups.com cloud learnt centers

Host & Network Penetration Testing: System-Host Based Attacks CTF 1 — eJPT (INE) A walkthrough covering HTTP brute-forcing, WebDAV exploitation, and SMB enumeration to capture all f... 2026-6-5 06:40:13 | 阅读: 40 | 收藏 | InfoSec Write-ups - Medium - infosecwriteups.com ine target1 webdav target2 passwords

“Bug Bounty Bootcamp #44: No Login? You stumble on a login page. No “Register”, no “Forgot Password”. Just two lonely text boxes staring... 2026-6-5 06:40:1 | 阅读: 51 | 收藏 | InfoSec Write-ups - Medium - infosecwriteups.com wall chill otp invite

“Bug Bounty Bootcamp #44: No Login? You stumble on a login page. No “Register”, no “Forgot Password”. Just two lonely text boxes staring... 2026-6-5 06:40:1 | 阅读: 53 | 收藏 | Bug Bounty in InfoSec Write-ups on Medium - infosecwriteups.com forgotten otp knocking

“Bug Bounty Bootcamp #43: Login Page? Let’s be real — you’ve hit that login wall more times than you’ve hit “snooze” on a Monday morning.... 2026-6-4 08:17:41 | 阅读: 31 | 收藏 | InfoSec Write-ups - Medium - infosecwriteups.com staging fancy holmes morning door

“Bug Bounty Bootcamp #43: Login Page? 2026-6-4 08:17:41 | 阅读: 32 | 收藏 | Bug Bounty in InfoSec Write-ups on Medium - infosecwriteups.com

I Bought a ₹1,599 Government Book for ₹1. The Server Approved It. The payment page showed ₹1.00. I had not touched the price field. I had only touched one number in o... 2026-6-4 08:17:26 | 阅读: 40 | 收藏 | InfoSec Write-ups - Medium - infosecwriteups.com billing burp client merchant india

I Bought a ₹1,599 Government Book for ₹1. The Server Approved It. The payment page showed ₹1.00. I had not touched the price field. I had only touched one number in o... 2026-6-4 08:17:26 | 阅读: 36 | 收藏 | Bug Bounty in InfoSec Write-ups on Medium - infosecwriteups.com billing burp india client merchant

I Typed 000000 and the App Thought MFA Was Already On I check what actually happened on the backend.Get LordofHeaven’s stories in your inboxJoin Medium fo... 2026-6-4 08:17:8 | 阅读: 39 | 收藏 | InfoSec Write-ups - Medium - infosecwriteups.com frontend totp bypass attacker security

I Typed 000000 and the App Thought MFA Was Already On I check what actually happened on the backend.Get LordofHeaven’s stories in your inboxJoin Medium fo... 2026-6-4 08:17:8 | 阅读: 33 | 收藏 | Bug Bounty in InfoSec Write-ups on Medium - infosecwriteups.com frontend bypass totp attacker security

Setting Up n8n Locally on Kali Linux Using Docker Learn how to set up n8n on Kali Linux using Docker to automate SOC workflows. Covers deployment, con... 2026-6-4 08:16:58 | 阅读: 32 | 收藏 | InfoSec Write-ups - Medium - infosecwriteups.com n8n wazuh workflows organized ticketing

API Penetration Testing Checklist: How Real-World Attacks Break APIs Before Scanners Do Press enter or click to view image in full sizeHow Real-World Attacks Break APIs Before Scanners DoA... 2026-6-4 08:16:42 | 阅读: 33 | 收藏 | InfoSec Write-ups - Medium - infosecwriteups.com security shadow attackers assignment

I Finished My Thesis Defense — A Journey to Mobile Forensic Thomas Shelby and May CarletonIf there is an award for making things complicated, I’d probably be th... 2026-6-4 08:16:28 | 阅读: 33 | 收藏 | InfoSec Write-ups - Medium - infosecwriteups.com analysis acquisition examination ncat busybox

“Bug Bounty Bootcamp #42: JWT Attacks — How a Stolen Token or a Weak Secret Can Grant You Admin… JSON Web Tokens are everywhere — in cookies, Authorization headers, and API calls. But a misconfigur... 2026-6-4 08:16:17 | 阅读: 38 | 收藏 | InfoSec Write-ups - Medium - infosecwriteups.com ssrf lesson sizefriend stateless

“Bug Bounty Bootcamp #42: JWT Attacks — How a Stolen Token or a Weak Secret Can Grant You Admin… JSON Web Tokens are everywhere — in cookies, Authorization headers, and API calls. But a misconfigur... 2026-6-4 08:16:17 | 阅读: 34 | 收藏 | Bug Bounty in InfoSec Write-ups on Medium - infosecwriteups.com linkwelcome ssrf stateless