Following HACKLIDO's news feed is very easy. Subscribe using the "follow" button on the top right and if you want to, choose the updates by topic or tag.
We will deliver them to your inbox, your phone, or you can use follow.it like your own online RSS reader. You can unsubscribe whenever you want with one click.
Keep up to date with HACKLIDO!
HACKLIDO: HACKLIDO
Is this your feed? Claim it!
Day 8 made the victim’s browser betray them. Today the server betrays itself. Server Side Request Forgery, SSRF, is the bug where you make a server send a request to a destination you choose, instead of the one it was meant to fetch. HackerOne has called SSRF the top vulnerability by payout for internet and online services compa...
Thirty days ago the premise was simple: agents have hands now, and the security industry has not caught up. You have spent four weeks building both halves, offense and defense, and yesterday you turned that into a repeatable methodology. Today is not a technique day. It is a map of where this goes next, because knowing the attacks is...
CSRF: Making the Browser Betray the User
Day 7 put your code in the victim’s browser. Today you do something quieter. You do not run code on the target site at all. You get the victim’s browser to send a request that the site trusts, because the browser attaches the victim’s own session to it. Cross Site Request Forgery, CSRF, is the bug where the site cannot tell whe...
Agent Pentest Methodology and Reporting
Yesterday you red teamed your own agent and produced a rough assessment. That was the exercise. Today we turn it into a procedure you can run on any agent, for any client, in any week, and get comparable results every time.
This matters because agent testing has a bad habit: it drifts into improvisation. Someone pastes ...
Four weeks in, you have two toolkits. An offensive one, every attack from weeks one to three, and a defensive one, every control from week four. Today you point the first at the second. Red teaming your own agent is the exercise that proves your defenses actually work, finds the gaps you missed, and produces the assessment that the final two days t...