Kiyell is a cybersecurity professional that enjoys researching threats and creating tools that that test for vulnerabilities and help secure infrastructure. When not busy hacking or programming, he also enjoys writing educational content.
In the over 6 years I’ve worked in the field of cybersecurity, I am still surprised by the many threats and vulnerabilities that are out there. As a bug bounty hunter working from the offensive side, I’ve found insecure APIs in banks that leaked account details and social security numbers, exposed cloud storage buckets leaking source code, and many other high impact vulnerabilities in web…
In a previous post I explained that my research into security vulnerabilities in Pi-hole led to me to discovering a more severe vulnerability in another project. In this article I will talk about the vulnerability that i found in ProjectSend. What is ProjectSend?
As I write this post I am currently 49% through HackTheBox’s Penetration Tester path in preparation for their Certified Penetration Tester Specialist (CPTS) exam. What is this course and why am I taking it? I will try to answer this question and also give my opinion on what I like, dislike, and who I would recommend to also take this course and obtain the CPTS certification. What is the HTB CPTS?…
In my journey as a bug bounty hunter, one of the things that I do all the time is pentesting web applications without access to the source code. This is known as black-box testing. So when I recently purchased a Raspberry Pi and installed Pi-hole for use in my home network, I started thinking about testing for a change, a piece of open source software I’m using for security flaws.