Continue your Advent of Cyber journey and learn about container security

Discover hidden services and keys using Nmap and network enumeration.

Learn Docker escape techniques and uncover hidden secrets in containers.

Learn how to spot phishing emails from Malhare’s Eggsploit Bunnies sent to TBFC users.

YARA Rules — YARA mean one!

I’m on track to complete the Cyber 101 track this side of 2025, which is great! and the truth is that its quite a widetrack and covers so…

Containers — DoorDasher’s Demise

Bypassing an Akamai WAF involves techniques like obfuscation, leveraging inconsistent data interpretation, and exploiting specific…

Hi Vipul from The Hacker’s Log here 👋 If you’ve ever built a web app, you know the upload feature seems innocent — “Just let users upload…

Most people enter bug bounty hunting believing in accidents.

How a Simple GraphQL ID Change Allowed Deletion of Other Users’ Data on HackerOne

Here’s Exactly How

Bypassing server side filtration to get a reflected XSS

Entity authentication, often simply referred to as authentication, is the process of verifying the identity of a user, system, or device…

10 + crucial tools for post-exploitation

A simple case of WebSocket message manipulation

Learn how YARA rules can be used to detect anomalies.

Continue your Advent of Cyber journey and learn about container security.

Lab Overview

19 malicious VS Code extensions bypassed detection by hiding a Rust trojan in tampered node_modules and a fake banner.png using steganography. The attack uses cmstp.exe (LOLBIN) for execution.

In late 2025, I used GitHound to uncover a high severity security issue involving leaked Snowflake tokens and sensitive information on a…