Hey everyone! I am back with another walkthrough, and this time we are trying a new website called Web Verse! They have some fun labs, and I highly recommend you check them out. Here is my walkthrough of the DockerHive challenge!
404Yeti here. Today we’re cutting into another BugForge challenge, this time focusing on Tanuki and an Insecure Direct Object Reference (IDOR) vulnerability hiding behind a simple numeric pattern. This is the kind of flaw attackers appreciate because it rarely looks dramatic at first. No loud errors. No obvious breakage.
1. 404Yeti here. Today we’re stepping into another BugForge challenge, this time carving open Cheesy Does It. What looked like an ordinary login portal turned out to be sitting on a brittle foundation. Under a little pressure, it cracked fast. This challenge revolves around a classic failure: SQL injection
1. Hey everyone — 404Yeti here, back with another BugForge challenge. Today we’re revisiting Cafe Club, but this time we’re focusing purely on an IDOR vulnerability and how it can scale into something much worse: mass account takeover. Let’s break it down. ❄️ Step 1: Create 2 accounts For
Hey everyone — 404Yeti here, back with another BugForge challenge. Today we’re revisiting Shady Oaks Financial, but this time… we’re breaking the bank using a race condition attack. ❄️ This one is all about timing, parallel requests, and exploiting logic flaws. Let’s get into it. Step 1. set up
Hey everyone — 404Yeti here, back with another BugForge challenge. Today we’re working on the GiftLab web app, and this one is a great example of why you should never trust encoded data just because it looks complicated. This challenge involves: * Shareable links * Base64 encoding * ID manipulation * IDOR vulnerability Let’
Hey everyone — 404Yeti here, back with another BugForge challenge. Today we’re working on the CopyPasta web app, and this one turns into a nice example of IDOR + password reset abuse, which is a dangerous combo in real applications. Step 1. Create an account As always, the first thing we
Hey everyone — 404Yeti here! Today we’re going through another Bug Forge challenge called Cheesy Does It. This one uses the same web app as previous challenges, but focuses on a different type of vulnerability. I really like how Bug Forge does this — instead of throwing everything at you at
Hey everyone 404yeti here and today we will go over a quick web app challenge from bug forge Step 1 make a user account Here we can see our financial dashboard Step 2 change the api endpoint to /admin While looking at the requests, I noticed the application was calling
Hey everyone! 404 yeti here! Today I wanted to talk about my time at Trace Labs and what I accomplished and what I learned! I worked for two teams, a training team and the software development team. I served them for about 8 months and I really learned alot. I
Hey everyone — Yeti here ❄️ Today we’re revisiting a previous Bug Forge web app challenge called Tanuki, but this time we’re digging a little deeper into the application to see what else we can uncover. This challenge highlights an important pentesting technique: Endpoint discovery Sometimes the most interesting functionality
Hey everyone — Yeti here, and yeah… I might be officially addicted to Bug Forge’s web app challenges now. ❄️ Today we’re tackling the Tanuki challenge — a deceptively simple flashcard app that hides a nice little vulnerability for us to uncover. Let’s dig in. Step 1: Create an account