https://labs.detectify.com/writeups/do-you-dare-to-show-your-php-easter-egg/ 2023-09-18T11:01:34+00:00 https://labs.detectify.com/writeups/pharmacy-hack-explained/ 2023-09-18T11:02:53+00:00 https://labs.detectify.com/how-to/exploiting-universal-xss-in-opera/ 2023-09-18T11:03:06+00:00 https://labs.detectify.com/how-to/exploiting-an-xss/ 2023-09-18T11:10:43+00:00 https://labs.detectify.com/writeups/local-file-inclusions-in-perl-cgi/ 2023-09-18T12:26:33+00:00 https://labs.detectify.com/writeups/reflected-xss-vulnerabilities/ 2023-09-18T12:40:36+00:00 https://labs.detectify.com/ethical-hacking/details-on-the-java-how-to-disable/ 2023-09-18T12:49:54+00:00 https://labs.detectify.com/ethical-hacking/ultimate-sql-injection-payload/ 2023-09-18T14:02:40+00:00 https://labs.detectify.com/writeups/chrome-xss-protection-bias-using-rails/ 2023-09-19T07:09:56+00:00 https://labs.detectify.com/writeups/5-contexts-where-the-xss-auditor-wont-help-you/ 2023-09-26T07:58:17+00:00 https://labs.detectify.com/how-to/patching-the-bash-vulnerability-affecting-web-servers-and-many-other-services/ 2023-09-26T09:51:04+00:00 https://labs.detectify.com/writeups/hostile-subdomain-takeover-using-heroku-github-desk-more/ 2023-09-27T09:04:52+00:00 https://labs.detectify.com/writeups/hijacking-of-abandoned-subdomains-part-2/ 2023-09-27T10:16:35+00:00 https://labs.detectify.com/writeups/finding-an-xss-in-an-html-based-android-application/ 2023-09-27T10:23:14+00:00 https://labs.detectify.com/security-guidance/stealing-files-from-web-servers-by-exploiting-a-popular-pdf-generator/ 2023-09-27T10:39:42+00:00 https://labs.detectify.com/writeups/building-an-xss-polyglot-through-swf-and-csp/ 2023-09-27T12:14:08+00:00 https://labs.detectify.com/writeups/google-xss-turkey/ 2023-09-28T14:25:30+00:00 https://labs.detectify.com/ethical-hacking/using-google-cloud-to-bypass-noscript/ 2023-09-29T08:18:25+00:00 https://labs.detectify.com/how-to/how-i-disabled-your-chrome-security-extensions/ 2023-09-29T08:49:48+00:00 https://labs.detectify.com/writeups/how-patreon-got-hacked-publicly-exposed-werkzeug-debugger/ 2023-09-29T14:18:13+00:00 https://labs.detectify.com/ethical-hacking/bypassing-sop-and-shouting-hello-before-you-cross-the-pond/ 2023-10-02T15:45:28+00:00 https://labs.detectify.com/ethical-hacking/content-security-policy-csp-bypassing-form-action-with-reflected-xss/ 2023-10-03T10:19:09+00:00 https://labs.detectify.com/how-to/using-reverse-engineering-techniques-to-see-how-a-common-malware-packer-works/ 2023-10-03T16:38:44+00:00 https://labs.detectify.com/writeups/fusion-challenges-level02-write-up/ 2023-10-06T13:22:19+00:00 https://labs.detectify.com/security-guidance/7-tools-that-have-influenced-the-reversing-community/ 2023-10-06T13:57:17+00:00 https://labs.detectify.com/writeups/using-chromes-web-custom-data-uti-to-inject-a-stored-xss-in-slack/ 2023-10-10T14:54:24+00:00 https://labs.detectify.com/ethical-hacking/the-story-of-ev-ssl-aws-and-trailing-dot-domains/ 2023-10-11T13:08:30+00:00 https://labs.detectify.com/security-guidance/the-pitfalls-of-postmessage/ 2023-10-11T13:25:32+00:00 https://labs.detectify.com/writeups/postmessage-xss-on-a-million-sites/ 2023-10-11T13:51:00+00:00 https://labs.detectify.com/crowdsource-community/stored-xss-ing-millions-of-sites-through-html-comment-box/ 2023-10-11T14:32:47+00:00 https://labs.detectify.com/ethical-hacking/sqli-in-insert-worse-than-select/ 2023-10-11T14:36:47+00:00 https://labs.detectify.com/security-guidance/login-logout-csrf-time-to-reconsider/ 2023-10-11T14:55:21+00:00 https://labs.detectify.com/writeups/ios-7-lock-screen-bypass-write-up/ 2023-10-17T14:22:23+00:00 https://labs.detectify.com/writeups/another-ios-lock-screen-bypass-control-center-turned-off/ 2023-10-17T14:26:35+00:00 https://labs.detectify.com/security-guidance/the-lesser-known-pitfalls-of-allowing-file-uploads-on-your-website/ 2023-10-17T14:27:33+00:00 https://labs.detectify.com/how-to/how-the-celebrity-hack-could-have-been-done/ 2023-10-17T14:30:15+00:00 https://labs.detectify.com/security-guidance/chrome-extensions-google-is-tracking-you/ 2023-10-17T14:39:04+00:00 https://labs.detectify.com/writeups/slack-bot-token-leakage-exposing-business-critical-information/ 2023-10-17T14:57:14+00:00 https://labs.detectify.com/writeups/how-i-made-lastpass-give-me-all-your-passwords/ 2023-10-17T15:22:49+00:00 https://labs.detectify.com/crowdsource-community/guest-blog-bypassing-domain-control-verification-with-dns-response-spoofing/ 2023-10-19T07:57:59+00:00 https://labs.detectify.com/crowdsource-community/guest-blog-dont-leave-your-grid-wide-open/ 2023-10-19T08:12:01+00:00 https://labs.detectify.com/security-guidance/security-questions-are-not-secure/ 2023-10-19T08:16:31+00:00 https://labs.detectify.com/writeups/how-i-exploited-acme-tls-sni-01-issuing-lets-encrypt-ssl-certs-for-any-domain-using-shared-hosting/ 2023-10-19T08:34:02+00:00 https://labs.detectify.com/ethical-hacking/changing-the-url-of-social-media-sharing-buttons/ 2023-10-19T09:04:03+00:00 https://labs.detectify.com/crowdsource-community/graphql-abuse-bypass-account-level-permissions-through-parameter-smuggling/ 2023-10-19T09:16:27+00:00 https://labs.detectify.com/ethical-hacking/abuse-mitm-possible-regardless-of-https/ 2023-10-19T10:07:27+00:00 https://labs.detectify.com/ethical-hacking/thinking-outside-of-the-password-manager-box/ 2023-10-19T10:28:04+00:00 https://labs.detectify.com/crowdsource-community/investigation-of-php-web-shell-hexedglobals-3793-variants/ 2023-10-19T10:47:46+00:00 https://labs.detectify.com/how-to/tutorial-php-webshell-de-obfuscation/ 2023-10-19T11:16:17+00:00 https://labs.detectify.com/security-guidance/modern-php-security-part-1-bug-classes/ 2023-10-20T14:28:32+00:00 https://labs.detectify.com/crowdsource-community/cve-2020-29653-stealing-froxlor-login-credentials-using-dangling-markup/ 2023-10-23T11:12:03+00:00 https://labs.detectify.com/crowdsource-community/top-12-hacker-tips-to-secure-your-spa-from-crowdsource/ 2023-10-23T11:26:34+00:00 https://labs.detectify.com/security-guidance/what-is-a-prototype-pollution-vulnerability-and-how-does-page-fetch-help/ 2023-10-23T11:53:27+00:00 https://labs.detectify.com/how-to/set-up-docker-for-varnish-http-2-request-smuggling/ 2023-10-23T12:48:01+00:00 https://labs.detectify.com/security-guidance/how-blue-teams-can-defend-against-dependency-confusion-and-other-novel-supply-chain-attacks/ 2023-10-23T13:30:30+00:00 https://labs.detectify.com/security-guidance/10-types-of-web-vulnerabilities-that-are-often-missed/ 2023-10-23T14:16:00+00:00 https://labs.detectify.com/security-guidance/how-i-found-the-grafana-zero-day-path-traversal-exploit-that-gave-me-access-to-your-logs/ 2023-10-23T14:54:31+00:00 https://labs.detectify.com/ethical-hacking/discovering-the-origin-host-to-bypass-waf/ 2023-10-23T15:24:40+00:00 https://labs.detectify.com/ethical-hacking/hack-with-goodfaith-to-automate-and-scale-ethical-hacking/ 2023-10-25T14:50:31+00:00 https://labs.detectify.com/ethical-hacking/common-security-vulnerabilities-in-core-aws-services-exploitation-and-mitigation/ 2023-10-26T08:10:24+00:00 https://labs.detectify.com/crowdsource-community/module-disclosures-now-available-for-hackers-on-detectify-crowdsource/ 2023-10-26T08:30:24+00:00 https://labs.detectify.com/ethical-hacking/should-you-learn-to-code-before-you-learn-to-hack/ 2023-10-26T21:43:14+00:00 https://labs.detectify.com/ethical-hacking/determining-your-hacking-targets-with-recon-and-automation/ 2023-10-26T21:45:45+00:00 https://labs.detectify.com/crowdsource-community/detectify-crowdsource-offers-ethical-hackers-more-than-continuous-bounties/ 2023-10-26T21:47:46+00:00 https://labs.detectify.com/how-to/advanced-subdomain-reconnaissance-how-to-enhance-an-ethical-hackers-easm/ 2023-10-26T22:05:28+00:00 https://labs.detectify.com/security-guidance/tips-for-running-an-onion/ 2023-10-27T10:31:02+00:00 https://labs.detectify.com/ethical-hacking/how-to-supercharge-your-hacking-mindset-workflow-productivity-and-checklist/ 2023-10-27T10:36:47+00:00 https://labs.detectify.com/crowdsource-community/new-reward-system-to-accelerate-learning-and-growth-on-detectify/ 2023-10-30T10:50:22+00:00 https://labs.detectify.com/ethical-hacking/hakluke-creating-the-perfect-bug-bounty-automation/ 2023-10-30T11:48:17+00:00 https://labs.detectify.com/security-guidance/ssrf-vulnerabilities-and-where-to-find-them/ 2023-10-30T11:49:15+00:00 https://labs.detectify.com/writeups/how-i-got-the-bug-bounty-for-mega-co-nz-xss/ 2023-10-30T11:50:31+00:00 https://labs.detectify.com/writeups/hacking-cloudkit-how-i-accidentally-deleted-your-apple-shortcuts/ 2023-10-30T11:51:02+00:00 https://labs.detectify.com/security-guidance/xss-using-quirky-implementations-of-acme-http-01/ 2023-10-30T11:52:01+00:00 https://labs.detectify.com/ethical-hacking/solutions-to-the-twins-of-ten-xss-challenge/ 2023-10-30T11:53:24+00:00 https://labs.detectify.com/how-to/xss-challenge-twins-of-ten/ 2023-10-30T11:53:30+00:00 https://labs.detectify.com/crowdsource-community/enhancing-the-detectify-crowdsource-reward-system-with-more-continuous-and-lucrative-payouts/ 2023-10-30T13:15:34+00:00 https://labs.detectify.com/crowdsource-community/interview-crowdsource-hacker-gehaxelt/ 2023-10-30T13:35:26+00:00 https://labs.detectify.com/crowdsource-community/2022-detectify-crowdsource-awards/ 2023-10-30T13:45:58+00:00 https://labs.detectify.com/security-guidance/trackmania-a-chrome-plugin-to-stalk-your-friends-on-tinder/ 2023-10-30T14:14:24+00:00 https://labs.detectify.com/security-guidance/the-danger-of-recycled-phone-numbers/ 2023-10-30T14:15:07+00:00 https://labs.detectify.com/ethical-hacking/middleware-middleware-everywhere-and-lots-of-misconfigurations-to-fix/ 2023-10-30T14:15:59+00:00 https://labs.detectify.com/how-to/hack-apis-in-2021/ 2023-10-31T11:53:39+00:00 https://labs.detectify.com/how-to/hack-web-applications-in-2022-part-2/ 2023-10-31T12:00:52+00:00 https://labs.detectify.com/how-to/hack-web-applications/ 2023-10-31T12:02:32+00:00 https://labs.detectify.com/crowdsource-community/how-i-found-a-persistent-xss-affecting-thousands-of-career-sites/ 2023-10-31T12:03:33+00:00 https://labs.detectify.com/how-to/look-for-tls-private-keys-on-docker-hub/ 2023-10-31T12:05:23+00:00 https://labs.detectify.com/writeups/account-hijacking-using-dirty-dancing-in-sign-in-oauth-flows/ 2023-11-08T15:03:30+00:00 https://labs.detectify.com/security-guidance/what-hpkp-is-but-isnt/ 2023-11-08T15:08:14+00:00 https://labs.detectify.com/writeups/combining-host-header-injection-and-lax-host-parsing-serving-malicious-data/ 2023-11-08T15:08:28+00:00 https://labs.detectify.com/writeups/hacking-slack-using-postmessage-and-websocket-reconnect-to-steal-your-precious-token/ 2023-11-08T15:08:45+00:00 https://labs.detectify.com/ethical-hacking/bountydash-a-local-bug-bounty-statistics-dashboard/ 2023-11-08T15:09:13+00:00 https://labs.detectify.com/writeups/a-deep-dive-into-aws-s3-access-controls-taking-full-control-over-your-assets/ 2023-11-08T15:12:41+00:00 https://labs.detectify.com/how-to/using-google-analytics-for-data-extraction/ 2023-11-08T15:13:31+00:00 https://labs.detectify.com/ethical-hacking/scratching-the-surface-of-host-headers-in-safari/ 2023-11-08T15:14:25+00:00 https://labs.detectify.com/ethical-hacking/haklukes-huge-list-of-resources-for-beginner-hackers/ 2023-11-08T15:14:43+00:00 https://labs.detectify.com/writeups/bypassing-and-exploiting-bucket-upload-policies-and-signed-urls/ 2023-11-08T15:17:11+00:00 https://labs.detectify.com/security-guidance/modern-php-security-part-2-breaching-and-hardening-the-php-engine/ 2023-11-08T15:17:35+00:00 https://labs.detectify.com/writeups/how-i-hijacked-the-top-level-domain-of-a-sovereign-state/ 2023-11-08T15:19:48+00:00 https://labs.detectify.com/ethical-hacking/scaling-security-automation-with-docker/ 2023-11-08T15:20:39+00:00 https://labs.detectify.com/crowdsource-community/detectify-awarded-its-biggest-bounty-ever-during-the-height-of-log4j/ 2023-11-08T15:21:50+00:00 https://labs.detectify.com/writeups/undocumented-authentication-bypass-issue-in-aem-package-manager-blog-updated/ 2023-11-08T15:22:33+00:00 https://labs.detectify.com/ethical-hacking/detectify-releases-ugly-duckling-an-open-source-web-scanner-for-ethical-hackers/ 2023-11-08T15:22:49+00:00 https://labs.detectify.com/security-guidance/csp-flaws-cookie-fixation/ 2023-11-08T15:24:02+00:00 https://labs.detectify.com/writeups/dissecting-the-chrome-extension-facebook-malware/ 2023-11-08T15:29:41+00:00 https://labs.detectify.com/security-guidance/leveraging-aws-quicksight-dashboards-to-visualize-recon-data/ 2023-12-18T14:19:14+00:00 https://labs.detectify.com/crowdsource-community/2023-detectify-crowdsource-awards-meet-the-winners/ 2024-02-07T08:35:34+00:00 https://labs.detectify.com/security-guidance/reducing-the-attack-surface-in-aws/ 2024-03-27T09:19:01+00:00 https://labs.detectify.com/crowdsource-community/2024-detectify-crowdsource-awards-meet-the-winners/ 2025-02-18T09:40:48+00:00 https://labs.detectify.com/writeups/ai-agents-building-security-tests/ 2025-09-26T07:31:20+00:00 https://labs.detectify.com/how-to/how-we-invented-the-tesla-dom-doom-xss/ 2026-02-24T11:19:00+00:00 https://labs.detectify.com/crowdsource-community/crowdsource-awards-2025-celebrating-our-community-of-elite-ethical-hackers/ 2026-05-04T10:48:38+00:00 https://labs.detectify.com/how-to/how-to-hack-apis-in-2026/ 2026-09-10T12:09:17+00:00