RRodrigo Martinez Nuñez·3d agoFrom Developer to Attacker: Automatic Authentication Bypasses with pythonIntroduction Authentication is the front door of any web application, yet it remains one of the most frequently misconfigured components. Drawing from my experience developing backend systems in Djang8 min read·ctfcap.hashnode.dev1D
VVivek Chhediya·Oct 13AI Agent Red Teaming for Beginners: What It Is and How to StartLearn AI agent red teaming with practical steps to uncover prompt injection, tool misuse and permission failures before deployment.5 min read·vivekchhediya.hashnode.dev
AAeon Flex / Splicer Scorn·Sep 17Tool Poisoning on MCP Servers: The Attack Vector Nobody's PatchingEverybody's shipping AI agents. Nobody's auditing their toolchains.7 min read·chaincoder.hashnode.dev1C
AAhmed Awad ( NullC0d3 )·Aug 20🐺 HunterX v7.0.0 - Less Noise. More Verified Findings.A few months ago, HunterX was an idea. Today, HunterX v7.0.0 is out — and people are actually using it. 🚀 2,200+ Docker pulls ⭐ 1,200+ GitHub stars 🌎 Listed across major cybersecurity communities An3 min read·nullc0d3.hashnode.dev
ZZeroProtocol·Aug 14Client-Side Web Security EssentialsLearn how HTML, JavaScript, DOM, Ajax, JSON, forms, cookies, and sessions shape web applications and their security attack surface.8 min read·webpentestingdeepdive.hashnode.dev1
CChris Sheridan·Jul 28Teaching an Autonomous Pentest Agent to Prove a Breach — Not Just Claim OneA challenge-response nonce that proves a real shell popped—not a tarpit faking uid=0. Inside HALO's stdlib exploit-delivery ladder.5 min read·halosecurityhasnodedev.hashnode.dev1
AAhmed Awad ( NullC0d3 )·Jul 28HunterX: The AI-Powered Offensive Security Platform Redefining Red Teaming, Bug Bounty Hunting, and Penetration TestingTraditional Vulnerability Scanners Are Reaching Their Limits The cybersecurity industry has spent decades improving vulnerability scanners. They became faster. They became capable of sending millions9 min read·nullc0d3.hashnode.dev1
YYash Bhardwaj·Jul 23Vulnerability Assessment vs. Penetration Testing: Why Both Are Essential for Modern CybersecurityLearn the differences between Vulnerability Assessment and Penetration Testing (VAPT), why organizations need both.6 min read·data-privacy.hashnode.dev
AAyesha Khan·Jul 22Defending LLMs: What Actually Works, and Where It Still BreaksPart 2 of the LLM security series: how sandwich defenses, privilege separation & output validation actually stop prompt injection & jailbreaks.8 min read·ayeshakoder.hashnode.dev
VVivek Goswami·Jul 19TryHackMe’s Room - Tomghost Walkthrough Reconnaissance I usually begin with a classic Network Mapper(nmap) scan with the service version detection and aggressive scanning. As we can see here 22,53,8009,8080 are in open state 8080 HTTP wit2 min read·vivekgoswami.hashnode.dev1
