Learn how to spot phishing emails from Malhare’s Eggsploit Bunnies sent to TBFC users.

How I Rooted the Academy Machine by TCM Security

Temel SQLi mantığı, yanlış filtreleme kullanımı ve bundan kaynaklanan zafiyetin sömürülmesi. (PortSwigger lab)

A recon-first approach that uncovered XSS, SQLi, and two CERT-In Hall of Fame mentions.

By Shah kaif | “If you’re getting dupes, you’re not unlucky — you’re just inches away from payout.” | LinkedIn

In this post, I’ll share how I found an Insecure Direct Object Reference (IDOR) vulnerability in the children endpoint of…

An in-depth coverage of multi-platform testing areas, vulnerability discovery, tooling, and real-world exploitation concepts.

Badminton Blitz là tựa game thể thao di động hấp dẫn, mô phỏng bộ môn cầu lông với lối chơi nhanh, dễ tiếp cận nhưng vẫn đầy tính cạnh…

Security Is Not Just About Systems It’s About People

Back Alley Tales là một tựa game nhập vai kết hợp phiêu lưu với phong cách đồ họa hoạt hình 2D độc đáo. Trò chơi đưa người chơi vào những…

Câu Cá Vạn Cân là tựa game câu cá giải trí hấp dẫn, đưa người chơi bước vào thế giới đại dương rộng lớn với những loài cá khổng lồ có trọng…

A Hands-on Guide to Authenticated RCE, Credential Reuse, and Unauthenticated LFI

Siber güvenlik alanında, karmaşık SQL enjeksiyonları veya XSS saldırıları sıklıkla gündeme gelir ve geniş bir ilgi uyandırır. Ancak, sahne…

Unwrapping the Risks Hidden Inside Containerized Applications

สวัสดีค่ะ วันนี้เราจะมาแชร์วิธีการหา root flag ในกล่อง Sequel ซึ่งเป็นกล่องใน Starting Point - Tier 1 ของ HackTheBox ค่ะ ถ้าพร้อมแล้ว…

I’ve been quiet on this blog for a while, not because nothing was happening, but because a lot was happening.

Hack The Box Broke My Brain — And That’s Why It Works Hack The Box is probably the most frustrating learning platform I’ve ever touched. And I mean that in the most honest way possible. When I …

Ever wondered how your mobile banking application, like Opay, works and how it's able to process your transactions in seconds? It is all…

Discover how API threat intelligence helps banks detect attacks early, protect data, and safeguard customer trust.

APIs are the backbone of modern software. They power mobile apps, web platforms, internal services, and third-party integrations. Yet…