Hi guys.
In this writeup, we’re going to walk through the third challenge from the Pwn101 room on TryHackMe.

How to Download & Install VMware Workstation Pro (Free Version) on Windows

(And What Ethical Hackers Actually Do)

Current Status: APT detected exfiltrating data via AWS.

ARP spoofing & Man In The Middle Attacks Execution & Detection

Cut reconnaissance time by 70% — install in 5 minutes

This blog is a walkthrough of the PortSwigger Web Security Academy apprentice labs. I’ve kept the explanations simple and focused on the…

Last month, I stumbled across something that completely shattered my assumptions about tech careers. A 19-year-old kid from Argentina who…

Hey there!😁

Who am I ?

A deep dive into exploiting Server-Side Prototype Pollution in Next.js applications.

A simple IDOR walkthrough you can follow and recommend to others

Today was exciting — because instead of just reading concepts,  I actually stopped an attack inside a simulation.

Panduan lengkap XSS attack (Cross-Site Scripting) untuk ethical hacker, membahas jenis XSS, risiko keamanan web, dan cara pencegahannya

On unauthenticated access, cloud trust boundaries, and why defaults still fail

Why auth ≠ permission, and how logic bugs quietly break real systems

Your app works fine in development.
 Production tells a very different story.

Deep-Dive PII Hunting & Validation Techniques

Why infrastructure sometimes saves bad code (and why I stopped trusting the Repeater tab)

This website has an insecure CORS configuration in that it trusts all origins.