I want to share how I found and exploited this finding: CVE-2026-42291 - Read-write access to personal notes by sharing-link creation with no authorization in SysReptor Professional

CVE-2025-62172 I will discuss my first accredited CVE! I will go through: Personal thoughts, how I look for these types of issues and finally the technical details

This is a writeup for the HackTheBox machine ServMon. ServMon retired 20/06/2020 at 19.00 UTC. It is an easy Windows machine, and largely relies on CVE's for exploitation.

As most of you likely already know, you can register and use xsshunter for free at https://xsshunter.com/. As a quick recap, this is a tool mostly used for hunting blind XSS. So why would you want to host your own instance? I will review why you should and how to do it in this technical guide.

A non-technical overview on what to consider when running a Bug Bounty program

A Yubikey 5 NFC+ Setup Guide. Walks you through key generation, setup and troubleshooting.