Tagged articles

unauthorized access

7 articles · Page 1 of 1
Black & White Path
Black & White Path
Aug 26, 2026 · Information Security

How to Discover Unauthorized Access on Edu.cn Sites Using Hunter Queries

The article walks through using a Hunter.io query to locate edu.cn domains with registration pages, then demonstrates step‑by‑step vulnerability hunting—including login probing, directory scanning with the findsomething plugin, exposing an unauthenticated admin backend, and leveraging Burp and WPScan to gather sensitive data.

WordPressdirectory scanninghunter.io
0 likes · 3 min read
How to Discover Unauthorized Access on Edu.cn Sites Using Hunter Queries
Black & White Path
Black & White Path
Apr 21, 2026 · Information Security

A Full-Scale Penetration Test Walkthrough: From MSSQL Weak Passwords to Nacos N‑Day Exploits

This article documents a complete penetration test on a newly deployed environment, detailing how weak credentials, unauthenticated services, and misconfigurations in MSSQL, Nacos, Oracle, Telnet, OA, NC, Redis, Spring, and frontend assets were systematically discovered and exploited, with step‑by‑step screenshots illustrating each compromise.

MSSQLNacosOracle
0 likes · 6 min read
A Full-Scale Penetration Test Walkthrough: From MSSQL Weak Passwords to Nacos N‑Day Exploits
Efficient Ops
Efficient Ops
Jun 16, 2024 · Information Security

How a Former NCS Engineer’s Revenge Hack Caused $670K Loss and Prison

A Singapore court sentenced former NCS employee Kandula Nagaraju to over two years in prison after he illegally accessed his ex‑employer’s QA system, deleted 180 virtual servers, and caused more than $670,000 in damages, highlighting serious cybersecurity and legal repercussions.

Data losscybercrimeinformation security
0 likes · 6 min read
How a Former NCS Engineer’s Revenge Hack Caused $670K Loss and Prison
Efficient Ops
Efficient Ops
Nov 11, 2015 · Information Security

Why Redis Unauthorized Access Is a Critical Threat and How to Fix It

This article explains a high‑severity Redis unauthorized‑access vulnerability that can let attackers write SSH keys to the host, highlights the risk of exposing Redis to the Internet without authentication, and provides guidance on remediation and network protection.

Network ExposureRedisVulnerability
0 likes · 4 min read
Why Redis Unauthorized Access Is a Critical Threat and How to Fix It