The Hacking Tips category provides valuable insights into tools like RequestBin and DNSBin for ethical hacking. Learn how to use these platforms for testing webhooks, capturing requests, and analyzing DNS traffic to identify vulnerabilities. Master these essential tools to enhance your penetration testing and security skills, and stay ahead of cyber threats with actionable tips on leveraging RequestBin and DNSBin for effective security assessments.
Advisory
A comprehensive look at the ToolShell vulnerability chain affecting Microsoft SharePoint servers, including its impact, how it works, and steps to mitigate the risk.
Advisory
CVE-2025-32433 is a critical remote code execution (RCE) vulnerability in the SSH server implementation of Erlang/OTP. This vulnerability allows attackers to execute arbitrary commands without authentication.
Advisory
Learn how to detect CVE-2025-23120 in Veeam Backup & Replication using a custom Nuclei template. Step-by-step guide with code and images.
Hacking tips
Discover how to exploit Blind SQL Injection with DNSBin on RequestBin.net. Learn OOB SQLi techniques for MySQL, PostgreSQL, Oracle, and MS SQL using payloads that exfiltrate data via DNS queries. Perfect for ethical hacking and advanced security testing.
Hacking tips
SSH is the default administrative protocol on linux. SSH tunneling and SSH port forwarding are very useful features for the lateral movement phrase. There are three types of SSH port forwarding: Local Port Forwarding, Remote Port Forwarding, Dynamic Port Forwarding
Hacking tips
To test or exploit blind RCE, XXE,… the first thing which you think usually is outbound connection. Unfortunate, many importance servers are dropped the outbound connection. In such cases, you can use the DNS protocol to exfiltrate data. In this topic, We will talk about that technique.
Hacking tips
Discover the top essential hacking tools like Nmap, Burp Suite, and Aircrack-ng that help ethical hackers secure systems and identify vulnerabilities. Perfect for network analysis, password cracking, and web testing—use responsibly to enhance cybersecurity.
Hacking tips
These are many websites we have bookmarked while hacking. They are useful for many case, it included CTF writeups, OSINT, payload finding, post exploit,...
Hacking tips
Burp Suite is an intercepting HTTP Proxy, and it is the defacto tool for performing web application security testing. This topic listed out the top extensions which are top useful for the hacking and bugbounty
Hacking tips
The brute force attack is still one of the most popular password-cracking methods. Nevertheless, it is not just for password cracking. Brute force attacks can also be used to discover hidden pages and content in a web application.