Project Black

I vibe hacked my way to RCE in OpenGamePanel. Why use more brain when less brain do trick? projectblack.io/blog/vibe-hack…

@sehrawat_a52913 Challenge is working fine :)

@project_blk Good to know, but the link for challenge is not working

We're hiring! Have a crack at our challenge and apply if you're interested: projectblack.io/ctf/challenge3… seek.com.au/job/79631934

Project Black is #hiring! 💼 We have an opening available at the entry level for a penetration tester. Send us your flags in an email together with your CV to hello@projectblack.io projectblack.io/ctf/challenge2… * Only open to candidates in Australia with full working rights.

We downloaded every Wordpress plugin, scanned it with Semgrep and found 9 SQLi and 5 LFI CVEs. Full dataset published for those who want to take a look themselves! projectblack.io/blog/cve-hunti…

Last year, we found OS command injection in the login page of a SaaS platform! It makes you wonder how much software out there has never been assessed. Do you assess your SaaS providers? projectblack.io/blog/the-impor…

We're #hiring! We have an entry level role open for someone who's eager to learn and looking to become a penetration testing and application security expert! If you're interested, have a crack at our little hiring challenge (projectblack.io/challenge.txt) and shoot us an email.

Is WAF IP whitelisting in a pentest cheating? We'd argue no, here's our side of the story. projectblack.io/blog/whitelist…

New blog post about Black Hat SEO practices. Some Aussie cyber consultancies appear to be engaging in these tactics. Fair game or foul play? projectblack.io/blog/aussie-cy…