Computer networking is the backbone of modern communication. Whether it’s browsing the internet or sharing files, networks make it all…

Kali Linux is widely used in cyber security, penetration testing, and ethical hacking. Before jumping into advanced tools, it’s important…

Dearest gentle reader,

Guide to cloud computing basics and instance cost tracking.

This is my first ever THM challenge I did and I want to share it with everyone! This one is fairly straight-forward and you don’t have to…

In today’s digital age, nearly every human activity is connected to the internet. From online transactions to learning to entertainment…

“Before touching a system, define the scope; before exploiting a flaw, understand the purpose.”

🔐 Authorization Bugs Beyond IDOR

I’m glad to share that I’ve won my first bug bounty program I’ve ever joined on pcbstore.com.bd 🎉 As appreciation, they rewarded me with a Logitech MK235 wireless mouse and keyboard combo. I …

Free Link 🎈

When Change Healthcare went down in February 2024, it made national news. Congress held hearings. The CEO testified. Everyone in healthcare…

It started like any normal day. I was browsing job opportunities, moving from one listing to another, exploring companies around Infopark…

How artificial intelligence is reshaping attacks, defenses, and the very idea of digital trust

A walkthrough of how attackers actually think about your vulnerability backlog

Room 1: OWASP Top 10 (2025) — IAAA Failures

Author note: This writeup emphasizes enumeration logic, vulnerability identification, and exploitation flow. Exact IP addresses, payloads…

Identification & Authentication Failures in the Real World

X isn’t the star of the show, there’s a reason for that!

During a Bug Hunting of a SaaS cloud platform, I found a critical Mass Assignment vulnerability. A “Maintenance” user — restricted to…

Introduction