Hacktive Security
hacktivesecurity.com
Actively hiring
Penetration Testing
Information Security
As featured in
View 2 jobs
Claim pageClaim
Follow
Overview
News
Technologies
Salaries
Products
People
Growth
Offices
Jobs
Financials
How Hacktive Security hires
Truth index
B 75/100
Ghost roles
0%
Stale roles
100%
Reposted roles
0%
Hacktive Security scores B on the Alion truth index (A is best, E worst), measured over 3 open roles re-checked against its own hiring board: 0% look like ghost listings, 100% have gone stale and 0% are the same role posted again. It measures how much of what this employer publishes turns into a real, finite search - not the employer as a workplace. How the index is computed
News
One Router, Three Vulnerabilities: Security Research on the TOTOLINK A720R
The research was conducted on the TOTOLINK A720R router, on its latest available firmware. During said research, I identified three separate vulnerabilities affecting the same component handling the backend of the web management interface:Telnet backdoor:
Read more
Report
The TSIG That Wasn't: Finding an Authentication Bypass Across CoreDNS Transports
The original bug affected the gRPC and QUIC transports in CoreDNS. At a high level, the problem was that these transports checked whether a TSIG key name existed in the server configuration, but they did not actually verify the HMAC attached to the DNS me
Read more
Report
datapizza-ai, Yet Another Vulnerable AI Framework
TL;DR Two Remote Code Execution (RCE) vulnerabilities were identified in datapizza-ai framework: SSTI leading to RCE (CVE-2026-2969, fixed): Unsafe usage of Jinja2's Template() allows Server-Side Template Injection (SSTI). If an attacker can control promp
Read more
Report
CVE-2025-67511: Tricking a Security AI Agent Into Pwning Itself
TL;DR A command injection vulnerability in the function tool run_ssh_command_with_credentials() available to AI agents in cai-framework = 0.5.9 allows to achieve Remote Command Execution. This post describes a vulnerability I discovered in the CAI framewo
Read more
Report
Ghostwire: a clear, lightweight Docker toolkit for Web, networking, and Active Directory.
TL;DR https://github.com/hacktivesec/ghostwire Traditional pentesting distributions (and the Docker versions as well) have become heavy, hard to maintain, and inconsistent across different environments. Ghostwire was created to offer a simpler alternative
Read more
Report
Introduction to OPSEC (Part 2)
The Domino Effect: An Analysis of Catastrophic OPSEC Failures Through Aggregated Technical Lapses This research validates the thesis that major operational security (OPSEC) compromises are overwhelmingly the product of an accumulation of fundamental techn
Read more
Report
CVE-2025-47943: Stored XSS in Gogs via PDF
TL;DR Gogs is an open source self-hosted Git service. In the version 0.13.2 and prior, there is a stored Cross-Site Scripting (XSS) vulnerability, which allows client-side Javascript code execution. The vulnerability is caused by the usage of a vulnerable
Read more
Report
Conosciamo Edoardo Ottavianelli - Penetration Tester
Non proverò a farvi tornare alla memoria la vostra infanzia da nerd, i primi computer o con quale software vi siete approcciati all'informatica (io non mi ricordo ad essere onesto, qualcosa come Bearshare o MSN…). Preferisco piuttosto parlare degli errori
Read more
Report
Lessons from a Blue Team failure
Introduction Effective cybersecurity relies not only on robust defense mechanisms but also on swift and coordinated incident response procedures. However, even well-prepared organizations can suffer critical failures if response protocols are not strictly
Read more
Report
CVE-2025-25362: Old Vulnerabilities, New Victims - Breaking LLM Prompts with SSTI
TL;DR A Server-Side Template Injection (SSTI) vulnerability in spacy-llm = v0.7.2 allows attackers to execute arbitrary code via injecting a crafted payload into the template field. Update spacy-llm to version v0.7.3 or later. What is spaCy spaCy is an op
Read more
Report
Show more news
Tech stack
The technologies known for Hacktive Security, by layer.
Languages
Python
Practices & domains
Red Teaming
Wi-Fi
Sign in to see how your skills match this stack
Sign In
Salary insights
Compensation ranges based on this company's open jobs
Median
$53k
Typical range
$50k – $56k
Open positions
2
1
Jobs
Middle
100%
| Level | Jobs | Median | Typical range |
|---|---|---|---|
| Middle | 1 | $50k | $50k |
Highest paying role
Hardware Hacker – Cyber Security (Italy)
$56k
Normalized to USD per year
Growth
Hiring Momentum
28/100
Slowing
Open positions
3
0 opened / 0 closed in 30 days
ATS activity
Every ~5 hours
Today
Hiring Dynamics
0%
Hiring Focus
The percentage next to each role is its share of the company's job openings over the last 90 days; the arrow shows the shift versus the previous period.
Security
67% ▼
Sales
33% ▼
Jobs
up to $50k per year • Hybrid • 3+ years exp • Bachelor's Degree
PCI DSS
HIPAA
Apply
up to $56k per year • In office • Bachelor's Degree
Python
Red Teaming
DevOps
Wi-Fi
Apply