CONTEST!!

Lab of the day:
labs.hackxpert.com/IDOR/

IDOR fun :D How many can you crack without looking at the solutions?

Whoever can write the best writeup in 24 hours from this post going up about MORE THAN ONE LAB!! Gets a nice price <3

- Funniest writeup: 1x Endless…

I WANT TO WIN .... wait ... fuck nvm

GIVEAWAY TIME

Are you a biker? Show me a pic of your ride and we will send you a free course in your DM!

Max 25 entries, first 25 win, otherwise I am busy all night x)

Giveaway TIMEEEE

thexssrat.podia.com/uncle-rat-s-ul…

20x Bug bounty guide

CWE's every pentester should know

blog.hackxpert.com/2023/04/cwes-e…

GIVEAWAYYYY TIME

Let's start with 20x bug bounty guide!
thexssrat.podia.com/uncle-rat-s-ul…

Sorry guys <3
I am a bit sick and lost sight of this ... (I litteraly almost killed myself while putting chicken on a skewer ... nice)

Good news ... the counter is at 200 likes now x) Thanks for…

OSI attacks #Hacking #CyberSecurity

blog.hackxpert.com/2024/04/osi-at…

🔐 5 Home Network Security Tips:
- Change default passwords.
- Regularly update your OS and devices.
- Enable WPA3 on Wi-Fi.
- Use a VPN for extra privacy.
- Disable WPS and unnecessary remote access features and open ports.

Stay safe online! #CyberSecurity #HomeNetwork

42 possible steps (with links to instructions) you can take to try to deanonymise a social media account.

sowel.soxoj.com/Instructions/H…

(part of SOWEL - Socmint Weaknesses Enumeration List)

Contributor Soxoj

GIVEAWAY!

thexssrat.podia.com/bad-bash-by-ja…

25x FREE bad bash <3

Another breach, Roku said hackers gained unauthorized access to 576,000 accounts, the company’s second data-breach incident this year!

roku.com/blog/protectin…

Picking the Right Bug Bounty Program: Exploring Targets and Platforms.

thexssrat.medium.com/picking-the-ri…

I NEED YOUR HELP <3

labs.hackxpert.com

Go check out our new labs please and test them, see if they still work as expected

Question… I have a challenge on my path

Any tips on tracking clicks in an iframe with js? The browser normally binds the script to the main domain and not the Iframe if it does not belong to the same domain 🥴

To be very clear, this is for a bounty hunt but can’t say too much

A list of 50 web application exploit techniques that bug bounty hunters should be familiar with. 🎉🥳

blog.hackxpert.com/2023/11/a-list…

#bugbountytips

Adding another non-salted hash to ntlm.pw ... which one would you like?

List of websites for hackers 🔥

blog.hackxpert.com/2024/02/useful…

Challenge time!🐀 Find Uncle Rat to reveal your FREE voucher for 'Uncle Rat's XSS '2024 Guide'!
labs.hackxpert.com/findUncleRat

Plus, a massive sale! 🌟 Get 85% OFF 'Uncle Rat's Bug Bounty And Web App Hacking Guide'. thexssrat.podia.com/uncle-rat-s-ul…
#CyberSecurity #BugBounty #XSS

Active Directory attack list

blog.hackxpert.com/2024/03/active…