PENTESTING SECRETS

Exploits Explained

The Exploits Explained series features technical vulnerability insights from the elite security researchers on the Synack Red Team. It offers a vetted forum for this global community of hackers to share the discovery of real-world vulns, offer tips for uncovering common exploit paths and unpack their use of GenAI tools.

Read Now

Guest Blog: From File Upload to RCE(Author’s Note: This vulnerability was found during testing on Synack.  I have anonymized, altered, or removed all detail about the customer to keep this... Read more](/content/exploits-explained/guest-blog-from-file-upload-to-rce/index.html)

A Deep Dive into XXE InjectionWritten by Synack Sr. Security Program Analyst Trent Gordon Editing and vulnerability reference by Senior Manager, Technical Operations Jake Garner In my career as... Read more](/content/exploits-explained/a-deep-dive-into-xxe-injection/index.html)

Persistent XSS via image metadataHi I’m Mikhail Sosonkin, a Synack Red Team member. Being a builder and a hacker at heart, my interests are in vulnerability analysis, automation, malware and... Read more](/content/exploits-explained/persistent-xss-via-image-metadata/index.html)

Hacker PathwaysGetting on the fast track and leveling up … Ozgur is a solid example of what it takes to “Level Up”, moving quickly from recent college grad to now being one of the... Ozgur Alp Read more](/content/exploits-explained/hacker-pathways/index.html)

‘Untranslocating’ an AppApple broke some of my apps – let’s show how to fix them! I’m going to caveat that first and foremost I’m a security researcher, not a macOS... Read more](/content/exploits-explained/untranslocating-apps/index.html)

How I Hacked HotmailAt Synack we really enjoy great vulnerabilities, whether in web, mobile, host or even in completely outrageous devices and systems (satellite hacking anyone?). But... Read more](/content/exploits-explained/how-i-hacked-hotmail/index.html)