Error 404: Your Security Not Found – Tales of Web Vulnerabilities
Greetings to all, This article aims to provide insights and stories about vulnerabilities in web applications and their impacts. Throughout this text, I will
RESEARCH AREA
Research Blog
GLPI - SQL injection through dynamic reports
This post details the journey of our Research Team in uncovering a SQL Injection vulnerability in GLPI, an open-source ITSM tool predominantly used
Coffee: A COFF loader made in Rust
Abstract COFF stands for Common Object File Format, it is the file format generated by compilers after the code-generation stage, they typically only
Reconnaissance like a cyber scout - Part 3. Final.
Shalom Kravim Seebernetiyim! (Greetings cyber warriors) we are back to conclude our series in Reconnaissance Like a Cyber Scout. In this part, the author
Reconnaissance like a cyber scout - Part 2.
Salutations fellas! I'm back for the second part of our series on perimeter reconnaissance. Remembering that we reached half of our content,
Reconnaissance like a cyber scout - Part 1.
Greetings dear readers, how are you?! May the god of hacking be present in your lives! All kidding aside, through this article, which will
Fortigate - Authentication Bypass Lead to Full Device Takeover
1Day vulnerability research by Hakai - Research Team This post is about the journey to create a Proof-of-concept about CVE-2022-40684, this
SQL Injection and XSS Vulnerability on Centreon
I'm Daniel França Lima and i'm a penetration tester Jr and vulnerability researcher at Hakai Offensive Security. In order to