Have you ever wondered how many vulnerabilities you've missed by a hair's breadth, due to a single flawed choice? We've just released Shadow Repeater, which enhances your manual testing with AI-powere

Drak3hft7 on the value of soft skills in Bug Bounty, his journey to becoming an ethical hacker, his best bug find so far and his favourite hacking tools.

Introduction Hello, I’m RyotaK (@ryotkak ), a security engineer at Flatt Security Inc. A few days ago, I was upgrading my home lab network, and I decided to upgrade the OpenWrt on my router.1 After ac...

HTTP cookies often control critical website features, but their long and convoluted history exposes them to parser discrepancy vulnerabilities. In this post, I'll explore some dangerous, lesser-known

Dive into common CORS vulnerabilities found in Go codebases, with real-world examples of flawed origin validation. Understand how these mistakes occur and why Go developers need robust solutions to se...

drak3hft7 hunter profile

With just four months left until the NIS 2 Directive is mandated to come into force EU-wide, we’ve answered some FAQs about the cyber-resilience legislation.

This cheat sheet outlines common enumeration and attack methods for Windows Active Directory using PowerShell. - drak3hft7/Cheat-Sheet---Active-Directory

When talking with aspiring hackers, bug bounty hunters, or application security engineers, it often feels that there’s some misunderstanding around encoding. ...