In 2013, the FBI identified the operator of Silk Road, an online marketplace running on the anonymous Tor network, through a Stack Overflow post. Investigators found a coding question about connecting to a Tor hidden service, posted under a username called “frosty.” One detail gave it away: the post had briefly appeared under the poster’s […]

Las Vegas is gearing up for a massive cybersecurity conference, and you’ve been hired to conduct a penetration test against one of the casinos. The client — Hack Smarter World — is a luxury resort where many of the attendees will be staying. Your objective is to identify all vulnerabilities and elevate your privileges to root (if possible). Topics […]

A simple client-side bypass allowed a Loom Starter user to download video transcriptions that were supposed to be available only to Business users. I reported the issue through Bugcrowd. The report was ultimately classified as [Informational] because it was considered to have no security impact. Fair enough. I agreed with the triage decision rather than starting a […]

Essential Tools for Analyzing and Neutralizing Phishing Threats Continue reading on OSINT Team »

At first, everything looked normal. Continue reading on OSINT Team »

Must-use and best tools for Wi-Fi pentesting Continue reading on OSINT Team »