How I Leveraged a Hidden UUID in Burp Suite to Break Access Controls and Escalate My Privileges.

How a Simple LFI Turned Into Full Root RCE Hello everyone In this write-up, I’d like to walk you through a real-world vulnerability chain I recently encountered, showing how a simple LFI led to …

Learn the basics of AWS enumeration.

Explore web page source code and discover why sensitive data doesn’t belong in HTML, and that Base64 encoding is not encryption

Advent of Cyber — Day 1: Linux CLI — Shells Bells The unthinkable has happened. McSkidy has been kidnapped. Without her, Wareville’s defenses are starting to crumble, and Christmas …

This room explored various concepts of defensive security, also known as the blue team.

I was recently challenged to complete 50 TryHackMe Digital Forensics rooms in 30 days to qualify for a mentorship.

As this was my first time participating in Advent of Cyber, I must say I’m quite impressed. While it is described as beginner-friendly, it…

Executive Summary

Why patience beats power in network recon

Cybersecurity threats are evolving faster than ever. From AI-driven attacks to cloud vulnerabilities, organizations today face challenges…

Most bug hunters rush straight to exploitation techniques. Flashy payloads, complex attacks, advanced tools. But my biggest bug bounty…

Hello everyone, today I want to share a bug I discovered back in 2018 while exploring Facebook’s privacy features. It was a subtle issue…

Hey there!😁

A real-world bug bounty case study on a race condition and broken access control that caused a $10,800 business impact in a SaaS…

Free Link 🎈

Hey there!😁

Earn rewards with this simple method.

Free Link 🎈