** How I discovered a hidden user thanks to server responses ?**
My first real step into web hacking and it wasn’t what i thought it would be.
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/how-i-discovered-a-hidde … ⌘ Read more
How to Build a Threat Detection Pipeline from Scratch (Like a Cyber Ninja!)
Hey, cyber fam! Have you ever asked yourself:
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/how-to-build-a-threat … ⌘ Read more
Nothing changed… except for one detail. And that was enough to hack
Sometimes, hacking doesn’t require any exploit… just good observation.
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/nothing-c … ⌘ Read more
How to Create a Botnet Using One Tool: A Proof of Concept for Educational Purposes Aspiring…
Learn how attackers build and control botnets — safely and ethically — using … ⌘ Read more
**Burp, Bounce, and Break: How Web Cache Poisoning Let Me Control the App **
Hey there!😁
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/burp-bounce-and-break-how-web-cache-poisoning-let-me-con … ⌘ Read more
iPhone 17 Air Almost as Thin as Its Buttons, New Images Show
If you missed the video showing dummy models of Apple’s all-new super thin iPhone 17 Air that’s expected later this year, Sonny Dickson this morning shared some further images of the device in close alignment with the other dummy models in the iPhone 17 lineup, indicating just how thin it is likely to be.

The 1 Burp Suite Mistake That Cost Me $3,750 — Fix It in 30 Seconds
[Continue reading on InfoSec Writ … ⌘ Read more
SOC L1 Alert Reporting : Step-by-Step Walkthrough | Tryhackme
As a SOC analyst, it is important to detect high-severity logs and handle them to protect against disasters. A SOC analyst plays the…
[Continue reading on InfoSec Write-ups … ⌘ Read more
**404 to 0wnage: How a Broken Link Led Me to Admin Panel Access **
Hey there!😁
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/404-to-0wnage-how-a-broken-link-led-me-to-admin-panel-access-2b58e1fffaa3?source=r … ⌘ Read more
How to Start Bug Bounty in 2025 (No Experience, No Problem)
✅Free Article Link
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/how-to-start-bug-bounty-in-2025-no-experience-no-problem-89adc68da592?source=rss—-7b … ⌘ Read more
️ Hacking and Securing Kubernetes: A Deep Dive into Cluster Security
Disclaimer: This document is for educational purposes only. Exploiting systems without authorization is illegal and punishable by … ⌘ Read more
Grok AI Gains Vision and Voice Features in iOS App
xAI has launched a new Voice Mode for its Grok chatbot, introducing a feature called Grok Vision that lets users interact with the world through their smartphone camera. Much like ChatGPT and Google Gemini, Grok can now interpret what your phone sees and respond in real time.
Using Grok Vision, iPhone users can point their camera at an object and ask “What am I looking a … ⌘ Read more
Apple Releases New iOS 18.5 and macOS Sequoia 15.5 Public Betas
Apple today seeded the second public betas of upcoming iOS 18.5, iPadOS 18.5, and macOS Sequoia 15.5 updates, allowing the public to test the updates ahead of when they see an official launch. The public betas come a day after Apple provided the third betas to developers.
Public beta testers can downlo … ⌘ Read more
iPhone 17e Nears Trial Production, Launch Tipped for Late May 2026
Apple’s next-generation iPhone 17e is nearing the trial production stage, with the mid-range device tentatively scheduled for a May release, according to a proven leaker with sources in Apple’s Chinese supply chain.
WeChat-based leaker Fixed Focus Digital shared the claims on Tuesday, adding that the i … ⌘ Read more
trying to not feel stressed today, so I digitally colored a smol frog that says fuck terfs! >m< i have no idea if I did that right bc it’s my first time using yarn to post an image so rip to me if I messed that up :’D
RISC-V images for Fedora Linux 42
The Fedora Project’s RISC-V\
special-interest group (SIG) has announced
the availability of Fedora Linux 42 images for supported\
RISC-V boards, as well as QEMU
and container images. The SIG is working toward making RISC-V a
primary arc … ⌘ Read more
Get Apple’s M3 iPad Air for Up to $70 Off on Amazon
Amazon is kicking off the week with multiple discounts on Apple’s M3 iPad Air, offering as much as $70 off these tablets. Prices start at $569.00 for the 128GB Wi-Fi 11-inch M3 iPad Air, down from $599.00.
️ Free TryHackMe Jr Penetration Tester Roadmap with Resources and Labs
A free, TryHackMe-inspired roadmap with resources and labs to kickstart your penetration testing journey.
[Continue read … ⌘ Read more
I Clicked a Random Button in Google Slides — Then Google Paid Me $2,240
The strange trick that exposed a hidden security flaw (and how you can find bugs like this too).
[Continue reading on InfoSec Write-ups »](https://in … ⌘ Read more
Lab: Exploiting an API endpoint using documentation
We will solve this lab based on the API documentation exposed to delete Carlos’s user.
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/lab-exploiting-an-api-endpoint-using-d … ⌘ Read more
** HTTP Parameter Pollution: The Dirty Little Secret That Gave Me Full Backend Access ️**
Free Link🎈
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.co … ⌘ Read more
Chaining Bugs Like a Hacker: IDOR to Account Takeover in 10 Minutes
🚀Free Article Link…
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/chaining-bugs-like-a-hacker-idor-to-account-takeover-in-1 … ⌘ Read more
Exposed Secrets in JavaScript Files
🔥Free Article https://medium.com/@Abhijeet_kumawat_/exposed-secrets-in-javascript-files-430a76834952?sk=ffd9ca6c8ede38ac77dcb68a507b9299
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/exposed-secrets-in-javascript-fi … ⌘ Read more
Wazuh Installation & Configuration: A Step-by-Step Tutorial
Hello, my digital adventurers! In this article, I will provide you with a step-by-step guide for installing and configuring the Wazuh…
[Continue reading on InfoSec Write-ups » … ⌘ Read more
**CORSplay of the Century: How I Hijacked APIs with One Misconfigured Header **
Free Link🎈
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/corsplay-of-the-century-how-i-hijacked-apis- … ⌘ Read more
**Bypassing Like a Pro: How I Fooled the WAF and Made It Pay **
Hi there!
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/bypassing-like-a-pro-how-i-fooled-the-waf-and-made-it-pay-e433193e1d9d?source=rss—-7b722bf … ⌘ Read more
Top Stories: iPhone 17 Pro Rumors, CarPlay Bug Fix, and More
This week saw rumor updates on the iPhone 17 Pro and next-generation Vision Pro, while a minor iOS 18.4.1 update delivered not just security fixes but also a fix for some CarPlay issues.
We also looked ahead at what else is in Apple’s pipeline for the rest of 2025 and even the 20th-anniversary iPhone coming in 2027, so read on belo … ⌘ Read more
How to make your images in Markdown on GitHub adjust for dark mode and light mode
When you want your images to look good in Markdown on GitHub, you might have to adjust for the UI around them.
The post How to make your images in Markdown on GitHub adjust for dark mode and light mode appeared first on [The GitHub B … ⌘ Read more
Apple Sports App Now Lets You Share Game Cards via iMessage and Social Media
Just in time for the start of the NBA and NHL playoffs this weekend, the Apple Sports app has received a new Game Card Sharing feature.
With this feature, Apple Sports users can generate and share game cards for all supported leagues, whether the matchup is upcoming, live, … ⌘ Read more
WAF Bypass Masterclass: Using SQLMap with Proxychains and Tamper Scripts Against Cloudflare &…
A hands-on guide to understanding and testing WAF evasion techniques usin … ⌘ Read more
Burp Suite Beyond Basics: Hidden Features That Save Time and Find More Bugs
📌Free Article Link
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/burp-suite-beyond-basics-hidden-f … ⌘ Read more
ResolverRAT: A Sophisticated Threat Targeting Healthcare and Pharma
he healthcare and pharmaceutical sectors are prime targets for cybercriminals due to their sensitive data and critical infrastructure. In…
[Continue read … ⌘ Read more
** CVSS 10.0 Critical Vulnerability in Erlang/OTP’s SSH: Unauthenticated Remote Code Execution Risk**
A critical security vulnerability (CVE-2025–32433) with a CVSS … ⌘ Read more
iPhone Shipments Down 9% in China’s Q1 Smartphone Boom
Apple’s iPhone shipments in China declined by 9 percent in the first quarter compared to the year earlier, and it was the only major smartphone vendor to see a decline, according to data from research firm IDC.
Shipments of iPhones fell to 9.8 million units, giving Apple a market share of 13.7 percent, do … ⌘ Read more
Open Your Favorite Chat Right From Your iPhone Lock Screen
In iOS 18.4, Apple added a new Shortcuts action to open a specific conversation in the Messages app. This means it’s now possible to open a chat thread with someone important to you straight from your Lock Screen, for example. Keep reading to learn more.
If you’d like to reduce the time it takes to chat with a frequently conta … ⌘ Read more
Secret tricks to get hidden information in Bug Bounty
This article gives you a best and hidden tricks to find secret or hidden information from GitHub. we can call hidden approach on GitHub.
[Continue reading on InfoSec Write-ups »](https:/ … ⌘ Read more
Hacking and Securing Docker Containers: A Deep Dive into Common Vulnerabilities and Test Cases
Disclaimer: This document is for educational purposes only. Exploiti … ⌘ Read more
️ Blind XSS Attack in Production: My Favorite Exploit with a Delayed Surprise
Free Article Link
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/%EF%B8%8F-bli … ⌘ Read more
iPhone 18’s Costly 2nm Process Adoption Could Lead to Price Hikes
Apple’s iPhone 18 models will adopt TSMC’s 2nm manufacturing process for the next-generation A20 chip, which will bring substantial performance and power efficiency improvements to next year’s iPhones, but it may also incur significantly more costs that Apple could pass onto the customer.
The latest corroboration that Apple will use TSMC’s 2nm proce … ⌘ Read more
ProcessOne: ejabberd 25.04
Just a few weeks after previous release, ejabberd 25.04 is published with an important security fix, several bug fixes and a new API command.
Release Highlights:
If you are upgrading from a previous version, there are no change … ⌘ Read more
Apple Releases iOS 18.4.1 With Bug Fixes
Apple today released iOS 18.4.1 and iPadOS 18.4.1, minor updates to the iOS 18 and iPadOS 18 operating systems that came out last September. iOS 18.4.1 and iPadOS 18.4.1 come two weeks after the launch of iOS 18.4 and iPadOS 18.4.
 no … ⌘ Read more
Apple Says These Products Are Now Vintage
Apple today updated its vintage products list to add the 2018 Mac mini and the iPhone 6s, products that will now get more limited service and repairs now that they are considered vintage.
The iPhone 6s initially launched in 2015, but Apple k … ⌘ Read more
** OWASP Top 10 for LLMs in 2025: Security Test Cases You Must Know**
As Large Language Models (LLMs) continue to integrate into critical systems, securing them has become a top priority. In 2025, OWASP…
[Continue reading on I … ⌘ Read more
**Click, Recon, Jackpot! ️♂️ How a Subdomain Led Me to an S3 Treasure Trove **
Free Link🎈
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/click-recon-jackpo … ⌘ Read more
⚡️Oops, They Logged It! Turning LFI into Remote Shell Like a Pro ⚔️
Free Link🎈
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/%EF%B8%8Foops-they-logged-it-turning-l … ⌘ Read more
Mastering the Linux Terminal: 10 Essential Network Commands You Need to Know
Hello, my digital adventurers!
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/mastering-the-l … ⌘ Read more
** Uncovering Hidden APIs: How One Forgotten Endpoint Made Me $500**
🚀Free Article Link
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/uncovering-hidden-apis-how-one-forgotten-endpoint-made-me-500-424e6388c … ⌘ Read more
Foldable iPhone’s Under-Screen Camera Likely Won’t Include Face ID
Apple’s rumored foldable iPhone currently in development features an under-screen camera integrated into the folding display, but the module is unlikely to include TrueDepth components that make up Face ID. That’s according to Weibo-based leaker Digital Chat Station who has sources within the Chinese supply chain.

Amazon today has the USB-C AirPods Max on sale for $479.99 in every color, down from $549.00. This beats the price we tracked last week by about $20, and it’s an overall second-best price on the headphones.
Children in Gaza Are So Hungry They’re Drawing Pictures of Food in the Sand
Sharon Zhang, Staff Writer - truthout
Stephan: This is what Palestinian children of Gaza have been reduced to, even as the international aid workers who are trying to help the children are being killed by Israel.
_Palestinian children react as they inspect the rubble and debris at the site of Isra … ⌘ Read moreHow to Spot a Phishing Email in 5 Seconds (Real Examples)
And What to Do When Your Smart Home and a Stalker’s AirTag Team Up Against You
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/how-to-spot-a-phishing-email-in-5-second … ⌘ Read more
$10,000 worth GitHub Access Tokens | Secret Search Operators
Secret but basic GitHub dorks & search operators that can lead to $10k bounty worth Acess Tokens.
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/10- … ⌘ Read more
A Complete Guide to Securing Secrets in AWS Lambda
Learn how to securely manage secrets in AWS Lambda using environment variables, KMS encryption, Secrets Manager, and more.
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/a-c … ⌘ Read more
Think You’re Safe? Here’s How Hackers Actually Break Into Your Accounts in 2025
How secure are you really when even two-factor authentication isn’t enough anymore?
[Continue reading on InfoSec Write-ups … ⌘ Read more
Foldable iPhone Resolutions Leak With Under-Screen Camera Tipped
Apple’s upcoming foldable iPhone (or “iPhone Fold”) will feature two screens as part of its book-style design, and a Chinese leaker claims to know the resolutions for both of them.
According to the Weibo-based account Digital Chat Station, the inner display, which is approximately 7.76 i … ⌘ Read more
One Random Recon, One Real Bounty: The Paytm Story
From countless dead ends to a single Swagger UI payload — the unexpected breakthrough that changed my bug hunting journey forever.
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/ghost-paytm-xss-bounty-4f5efe6a643b?source=rss—-7b … ⌘ Read more
iPadOS 19 Will Be ‘More Like macOS’ in Three Ways
A common complaint about the iPad Pro is that the iPadOS software platform fails to fully take advantage of the device’s powerful hardware.
That could soon change.
Bloomberg’s Mark Gurman today said that iPadOS 19 will be “more like macOS … ⌘ Read more
Renesas RZ/V2N Evaluation Kit for Real-Time Embedded Vision Applications
Renesas Electronics has introduced the RZ/V2N Evaluation Kit, a platform for developing embedded systems with on-device AI. Built around the RZ/V2N microprocessor, it combines an AI accelerator, image signal processor, and security features for vision-based edge applications. The evaluation platform includes two boards: the RTK0EF0186C02000BJ main board and the RTK0EF0168B00000BJ expansion board. Th … ⌘ Read more
@lyse@lyse.isobeef.org Just needed to update the version of the tool I packaged as an OCI image 🤣
(#zvi5i2a) @lyse@lyse Just needed to update the version of the tool I packaged as an OCI image 🤣
@lyse @lyse.isobeef.org Just needed to update the version of the tool I packaged as an OCI image 🤣 ⌘ Read more
AI problems, top to bottom:
1: Open AI nerds, believe fine tuning a language model algorithm, will eventually produce an AGI god.
2: Subpar artists and techbros who can’t code, convinced AI image bashing and vibe coding, will help convince the dumber parts of Internet, they are a real deal.
3: Parasites, using AI to scam people, because they just want passive income, selling crap, made by an automated process.
Side: Adobe&co, killing Flash/old web, pricing new artists and developers out, to face learning curves of free tools, or use AI, peddled as solution.
Top Stories: iOS 19 and iPhone 17 Pro Rumors, Siri Revamp Turmoil, and More
It was a big week for leaks and rumors in the Apple world, with fresh claims about iOS 19, the iPhone 17 Pro, and even the 20th anniversary iPhone coming a couple of years from now.
Sources also spilled the tea on the inner turmoil at Apple around the Apple Intelligence-driven Siri revamp that has seen significant delays, so read on b … ⌘ Read more
Dino: Dino 0.5 Release
Dino is a secure and open-source messaging application.
It uses the XMPP (Jabber) protocol for decentralized communication.
We aim to provide an intuitive and enjoyable user interface.
The 0.5 release improves the user experience around file transfers and includes two completely reworked dialogs.
Improved file sharingThe way file transfers are currently done in the XMPP ecosystem is limited in functionality a … ⌘ Read more
Anker Raises Prices on Amazon Due to Tariffs
Chinese company Anker is one of many companies that will be raising prices due to the tariffs put in place by U.S. President Donald Trump, and prices are already starting to go up on Amazon.
.
First up, version 1.100 adds emoji reactions to Bluesky’s direct messaging system. Users can now respond to messages with quick emoji reactions by holding down on … ⌘ Read more
@bender@twtxt.net @movq@www.uninformativ.de Thanks! I’ll think about switching to higher resolution teasers in the future. The reasoning behind the thumbnails is to avoid wasting traffic. Maybe folks in the outback or on expensive mobile networks appreciate it. Yeah, they could disable images in general.
Apple Continues Rolling Out Support for Carrier Satellite Services
Apple is continuing to add support for carrier-based satellite services, with au customers in Japan and One NZ customers in New Zealand now able to use the satellite connectivity offered by those carriers on compatible iPhone models.
Both [au](https://newsroom.kddi.com/english/news/detail/kddi_nr-533_3818.htm … ⌘ Read more
The new toy has arrived and is ready to be cleansed of it’s pre-installed Win 10 pro (yuck!) …
Apple’s 18.8-Inch Foldable Device to Enter Mass Production in Late 2026
Along with an iPhone “Fold,” Apple is believed to be working on a larger foldable device that’s somewhere around 19 inches, and one analyst suggests it could arrive as soon as late next year alongside Apple’s rumored foldable iPhone.
In a new research note covering likely post-tariff scenarios for Apple, investment firm GF Securi … ⌘ Read more
@prologic@twtxt.net this was the intended picture.
Sharing A picture of my friend, business partner and roommate Lord Oscar. #ForScience
iPad 11 vs. iPad Air Buyer’s Guide: 30+ Differences Compared
The iPad Air costs at least $250 more than the entry-level iPad, so is choosing the pricier model worth it? Or should you save the money and buy the 11th-generation iPad? This guide helps you to understand the differences between the two models and decide which is best for you.
![](https://images.macrumors.com/article-new/2025/04/iPad-11-vs-2024-iPad-Air-Feature.j … ⌘ Read more
iOS 18.4.1 Update Coming Soon for iPhones
Apple employees are testing iOS 18.4.1 for iPhones, according to the MacRumors visitor logs, which have been a reliable indicator of upcoming iOS versions. The software update will likely be released in a week or two, if not sooner.
As the version number implies, iOS 18.4.1 will obviously be a minor update that addresses software bugs and/or security vulnerabilities.
There ar … ⌘ Read more
Apple Releases iPhone 16e Parts for Do-It-Yourself Repairs
Apple this week made iPhone 16e parts available to order through its self-service repair store in the U.S. and many European countries.
There are parts and tools available for repairing an iPhone 16e’s display, battery, cameras, back glass, speakers, and more. Apple also allows customers to rent an iPhone toolkit for seven … ⌘ Read more
Leaked iPhone 17 Pro Cases Show Huge Cutout for New Camera Bump
Serial leaker Sonny Dickson is back today with a new image of some protective cases for Apple’s upcoming iPhone 17 Pro, and the large camera hole is certainly the standout feature on show.
The iPhone 17 Pro and 17 Pro Max are expected to debut a major redesig … ⌘ Read more
[$] Taking notes with Joplin
Joplin is an open-source
note-taking application designed to handle taking many kinds of notes,
whether it is managing code snippets, writing documentation, jotting
down lecture notes, or drafting a novel. Joplin has Markdown support,
a plugin system for extensibility, and accepts multimedia content,
allowing users to attach images, videos, and audio files to their
notes. It can provide synchronization of content across devices using
end-to-end encryption, or users can opt to sti … ⌘ Read more
Trump Believes Apple Could Manufacture iPhones in the U.S.
U.S. President Donald Trump “absolutely” believes that Apple could manufacture its iPhones and other devices in the United States, Press Secretary Karoline Leavitt said today during a media briefing.
Leavitt was asked whether Trump thought that iPhone … ⌘ Read more
5 Biggest Changes Rumored for iPhone 17 Pro
Later this year, Apple will introduce the iPhone 17 series, which includes the iPhone 17 Pro and the iPhone 17 Pro Max, two new high-end flagship devices that will be sold alongside the regular iPhone 17 and an all-new ultra-thin iPhone 17 Air.
If you have been holding out for the iPhone 17 Pro or its bigger sibling, here are five of the b … ⌘ Read more
CalDigit Launches New Thunderbolt 5 Docks
CalDigit today announced the upcoming launch of two new Thunderbolt 5 docks, the TS5 and the TS5 Plus. Both docks support transfer speeds of up to 80Gb/s with a speed boost feature when paired with Apple’s Thunderbolt 5 Macs.
The TS5 has a total of 15 ports, including four Thunderbolt 5 ports, two USB-A ports, three USB-C ports (including tw … ⌘ Read more
Apple Releases New Immersive Video App for Mac and Vision Pro
Apple today released a new app for managing an immersive video library on a Mac.
Apple Immersive Videos are 3D videos recorded in 8K resolution, with a 180-degree field of view and Spatial Audio. For example, recent performances by singer The Weeknd and … ⌘ Read more
iPhone 17 Pro’s New Rear Camera Bar ‘Same Color As Rest of Device’
Apple’s upcoming iPhone 17 Pro models will feature a redesigned rear camera module that spans the width of the device, but it will be the same color as the iPhone itself, rather than being part of a two-tone design.
MacRumors render showing the two-tone design that Gurman has ruled out
That’s according to [Bloomberg’s Mark Gurman]( … ⌘ Read more
DFRobot Previews RISC-V-Based FireBeetle 2 with ESP32-P4, Targeting Image and Video Applications
The FireBeetle 2 ESP32-P4 is an upcoming compact development board designed for real-time image processing, video streaming, and wireless communication. It targets HMI applications such as digital photo frames, security systems, home control panels, and smart doorbells. The board is built around the ESP32-P4R32 microcontroller, which features a dual-cor … ⌘ Read more