All articles

Started to being written in 2017, SerHack Blog represents a solid but unique point of view in Computer Science field. From cryptocurrencies to information security, from reverse engineering to phishing: many topics are depicted using layman terms. What are you waiting for? Read one of any articles.
Note that part of articles are in Italian since it's my first language. Italian culture and classicism gave me an inspiration for this blog.

Olivetti 0.88.1 for SerHack

🇮🇹 Come Ho Rotto la Barra di Ricerca di Envato

– Come Envato ha gestito dei potenziali rischi per la sicurezza attraverso il suo programma Bug Bounty Quando si pensa a grandi aziende come Slack, Atlassian, la sicurezza, dell’azienda e del cliente è fondamentale. Ma se proprio una di queste aziende come Envato, non fosse totalmente sicura? Ecco qua … Read Full Article

Come Ho Rotto la Barra di Ricerca di Envato illustration

How I broke Envato Search Engine

– How Envato managed two critical vulnerabilities discovered by me TLDR; Envato devs had not developed a strong filter in order to avoid any XSS Attack, and I noticed that I could perform a XSS Injection. I have contacted Envato and, after some investigations, they have discovered that my … Read Full Article

How I broke Envato Search Engine illustration

Hello world! I'm SerHack

– Hello world, I am SerHack, I am a developer, a security researcher and writer, I mostly write about software backend and a security researcher. I am from Italy where the security of citizens data is not seen as a priority. When I started looking to the world of development, I was like 12 years old. … Read Full Article

🇮🇹 Ciao mondo

– Ebbene sì, dopo aver riflettuto sull’utilità di un blog, sono qui ad annunciare ufficialmente che il sito è aperto! Ho affrontato circa un anno con molti pensieri, idee e analisi sparse qua e là nel web. Ora è giunto il momento di accorpare tutte le mie idee dentro un blog. Per chi ancora non mi … Read Full Article