Get ready for a deep dive into the world of ethical hacking!https://alupului.com/https://alupului.com/blog/cve-2026-28425-statamic-seo-pro-app-key-leak/https://alupului.com/blog/cve-2026-28425-statamic-seo-pro-app-key-leak/A content editor can inject Antlers into Statamic SEO Pro meta fields and dump the entire Laravel config, APP_KEY included, to any unauthenticated visitor.Sat, 13 Jun 2026 00:00:00 GMThttps://alupului.com/blog/cve-2026-27593-statamic-password-reset-link-injection/https://alupului.com/blog/cve-2026-27593-statamic-password-reset-link-injection/An unauthenticated _reset_url parameter in Statamic CMS redirects a password reset token to an attacker, leading to account takeover. Plus a bypass of the first patch.Fri, 12 Jun 2026 00:00:00 GMThttps://alupului.com/blog/ghostcms-stored-xss-in-embed-cards-leading-to-owner-takeover/https://alupului.com/blog/ghostcms-stored-xss-in-embed-cards-leading-to-owner-takeover/A low-privileged Contributor can permanently take over a Ghost CMS site Owner account through unsanitized embed card HTML in the admin panel. Ghost declined to patch it.Wed, 25 Feb 2026 00:00:00 GMThttps://alupului.com/blog/hacksmarter-verbose-walkthrough/https://alupului.com/blog/hacksmarter-verbose-walkthrough/The target was a Flask-based web application vulnerable to multiple critical security flaws...Thu, 22 Jan 2026 00:00:00 GMThttps://alupului.com/blog/hacksmarter-static-walkthrough/https://alupului.com/blog/hacksmarter-static-walkthrough/As a member of the Hack Smarter Red Team, you have been assigned a web application penetration test on a clients employee portal.Sun, 18 Jan 2026 00:00:00 GMThttps://alupului.com/blog/metasploit-for-beginners-series-with-labs/https://alupului.com/blog/metasploit-for-beginners-series-with-labs/We explore how Metasploit is used at different stages of penetration testing in a controlled training environment, including scanning, exploitation, and post-exploitation.Thu, 24 Jul 2025 00:00:00 GMThttps://alupului.com/blog/htb-chemistry-walkthrough/https://alupului.com/blog/htb-chemistry-walkthrough/Chemistry is an easy difficulty linux machine that showcases a RCE via a CIF File.Thu, 13 Mar 2025 00:00:00 GMThttps://alupului.com/blog/htb-trick-walkthrough/https://alupului.com/blog/htb-trick-walkthrough/Trick is an Easy Linux machine that features a DNS server and multiple vHostThu, 27 Feb 2025 00:00:00 GMThttps://alupului.com/blog/kali-linux-2025-best-setup-for-ethical-hacking/https://alupului.com/blog/kali-linux-2025-best-setup-for-ethical-hacking/Are you ready to upgrade your ethical hacking setup? In this guide, we will show you how to configure Kali Linux for 2025.Tue, 07 Jan 2025 00:00:00 GMThttps://alupului.com/blog/review-cbbh-exam-2025-for-hackthebox/https://alupului.com/blog/review-cbbh-exam-2025-for-hackthebox/From Zero to CBBH: My 3 month journey to becoming a certified bug bounty hunterThu, 02 Jan 2025 00:00:00 GMThttps://alupului.com/blog/perfection-hackthebox-walkthrough/https://alupului.com/blog/perfection-hackthebox-walkthrough/Perfection starts with a simple website designed to calculate weighted averages of grades.Fri, 12 Jul 2024 00:00:00 GMT