Hey everyone! I am back today to share my adventure of speaking at different events and today I will be sharing my experience about discussing how different teams in the industry struggle to work together. Prep Let's be honest, I wasn't sure how to interpret a
So This year I have done two talks for Swinburne University Vietnam related to malware analysis. But this time we are trying to keep up with the times and use machine learning. In this blog I will speak about my experience prepping and presenting this workshop! The Prep Teaching machine
So recently, I had the honor of teaching Malware analysis at Swinburne University in Vietnam! For context, I am the Vice President of the ISC Vietnam Chapter and have been teaching in some capacity for roughly 10 years. I was quite excited to teach this subject because malware analysis is
Hey everyone! I am back with another walkthrough, and this time we are trying a new website called Web Verse! They have some fun labs, and I highly recommend you check them out. Here is my walkthrough of the DockerHive challenge!
404Yeti here. Today we’re cutting into another BugForge challenge, this time focusing on Tanuki and an Insecure Direct Object Reference (IDOR) vulnerability hiding behind a simple numeric pattern. This is the kind of flaw attackers appreciate because it rarely looks dramatic at first. No loud errors. No obvious breakage.
1. 404Yeti here. Today we’re stepping into another BugForge challenge, this time carving open Cheesy Does It. What looked like an ordinary login portal turned out to be sitting on a brittle foundation. Under a little pressure, it cracked fast. This challenge revolves around a classic failure: SQL injection
1. Hey everyone — 404Yeti here, back with another BugForge challenge. Today we’re revisiting Cafe Club, but this time we’re focusing purely on an IDOR vulnerability and how it can scale into something much worse: mass account takeover. Let’s break it down. ❄️ Step 1: Create 2 accounts For
Hey everyone — 404Yeti here, back with another BugForge challenge. Today we’re revisiting Shady Oaks Financial, but this time… we’re breaking the bank using a race condition attack. ❄️ This one is all about timing, parallel requests, and exploiting logic flaws. Let’s get into it. Step 1. set up
Hey everyone — 404Yeti here, back with another BugForge challenge. Today we’re working on the GiftLab web app, and this one is a great example of why you should never trust encoded data just because it looks complicated. This challenge involves: * Shareable links * Base64 encoding * ID manipulation * IDOR vulnerability Let’
Hey everyone — 404Yeti here, back with another BugForge challenge. Today we’re working on the CopyPasta web app, and this one turns into a nice example of IDOR + password reset abuse, which is a dangerous combo in real applications. Step 1. Create an account As always, the first thing we
Hey everyone — 404Yeti here! Today we’re going through another Bug Forge challenge called Cheesy Does It. This one uses the same web app as previous challenges, but focuses on a different type of vulnerability. I really like how Bug Forge does this — instead of throwing everything at you at
Hey everyone 404yeti here and today we will go over a quick web app challenge from bug forge Step 1 make a user account Here we can see our financial dashboard Step 2 change the api endpoint to /admin While looking at the requests, I noticed the application was calling