Social Media
Services
Contact
E-mail: [email protected]
Phone: +30.210.6855061
Address: 466 Irakliou Ave. & Kiprou, 141 22 Iraklio Attikis, Athens, Greece
© Copyright - HackCraft // Powered by Neurosoft
Build Cyber Resilience with Offensive Security
A Practical Guide
Organizations today face an increasingly complex…
06/07/2026/by Nikos KarvounisOrganizations today face an increasingly complex…
MFA Bypass Techniques
MFA Bypass Techniques: How Attackers Get Past Multi-Factor Authentication
Multi-factor…
01/07/2026/by Vasilis FlengasMulti-factor…
Fairplay Evolves: Introducing the Web Dashboard and API
Intro
When Fairplay was first released, the focus was clear:…
20/05/2026/by Nick AliferopoulosWhen Fairplay was first released, the focus was clear:…
Offensive Cybersecurity Insights: The Spring Edition
Hello world!
Welcome to another Hackcraft Newsletter crafted…
05/05/2026/by Nikos KarvounisWelcome to another Hackcraft Newsletter crafted…
Race Conditions and Where to Find Them
Research and analysis by Themis Zoumpoulakis, Hackcraft’s Senior…
07/04/2026/by Themis ZoumpoulakisToken Auto-Refresher: Solving Auth Failures in Burp Suite
Intro
Modern web application security testing increasingly…
11/02/2026/by Vasilis FlengasModern web application security testing increasingly…
Offensive Cybersecurity Insights: A New Year Compilation
Hello world!
This is Hackcraft’s Team Newsletter, aka our…
04/02/2026/by Nikos KarvounisThis is Hackcraft’s Team Newsletter, aka our…
Red Teaming and Industry Pitfalls
Cybersecurity isn’t one-size-fits-all, and neither is security…
22/01/2026/by Nikos KarvounisMicrosoft SQL Server Hacking — TDS Downgrade Attack
Hey there, fellow hackers! As we kick off this new year,…
14/01/2026/by Nikos KarvounisXWizard: From XML to ShellExec Using Wizardry
Intro
Red Teaming in the day and age of EDRs often involves finding…
17/10/2025/by Nick AliferopoulosRed Teaming in the day and age of EDRs often involves finding…
Red Teaming: Beyond Compliance to Real Cyber Resilience
In today's ever-evolving cybersecurity landscape, organizations…
24/09/2025/by Villy VarsouOffensive X: Why Offense Is the New Defense?
The pulse of Offensive Cybersecurity was alive and thriving…
25/06/2025/by Nikos Karvounis
Offensive Cybersecurity Insights: The Spring Edition
/in Newsletter/by Nikos KarvounisHello world! Welcome to another Hackcraft Newsletter crafted by our researchers. If we had to describe the past two months in one phrase: Cybersecurity chaos, accelerated by AI. Let’s dive into the stories that stood out and what they mean for you, plus blogs worth your time, and a few tools we think deserve your […]
Race Conditions and Where to Find Them
/in Newsletter/by Themis ZoumpoulakisResearch and analysis by Themis Zoumpoulakis, Hackcraft’s Senior Cybersecurity Tester. What if the most dangerous bug in your application isn't a bug at all? Every function works as expected, every test passes correctly, access controls work as intended, and parameterized database queries return the right results. Yet, two requests arriving microseconds apart cause the system […]
Token Auto-Refresher: Solving Auth Failures in Burp Suite
/in Newsletter, Tools/by Vasilis FlengasIntro Modern web application security testing increasingly relies on automated scanning tools to identify vulnerabilities efficiently. However, as a team, we consistently faced a persistent challenge with bearer token expiration during automated scans. When tokens expired mid-scan, our automated tools encountered authentication failures, resulting in incomplete coverage and requiring manual intervention to update tokens and […]