I discovered a critical authentication bypass vulnerability in a WordPress plugin with 700,000+ active installations. Complete admin…

1. The Discovery

Hello fellow shadow dwellers and network members. Imagine slipping this sleek little beast into your pocket, a device that looks like a fun…

A writeup for “Digital Footprint” on TryHackMe.

Cybersecurity is no longer just a concern for large corporations or tech companies. In today’s digital-first world, every business — small…

In this blog, I will demonstrate how a simple directory listing vulnerability led to full system compromise during a penetration test.

# The Secret’s Out: When “secret” Is Your Secret

Hey there, my name is Sushruth and I love to tinker around and find new ways to break software, recently I came across a online game…

Build “tool endpoints” your agents can call safely — scoped permissions, hard validation, audit trails, and guardrails that survive…

If you want to learn application security testing approach/exploit, reading OWASP Top 10 & security standard books are not enough.

Welcome back to another write-up

Security by Design in 2026 Starts Before Code Exists

In the world of Cybersecurity, especially within a Security Operations Center (SOC), we are often flooded with data. But data without…

So, bro when you try to think of having a desire of getting access of your photo from a typical file server there has to be certain level…

Identity & Authorization Collapse

Disclaimer:

As a cybersecurity student, I often see developers rely on HTML attributes like type = “number” or maxlength=’10' to secure input fields…

In today’s digital world, networking is the backbone of communication between devices. From sending a simple message to accessing secure…

Build abuse-resistant throttling in NestJS that stops bots, respects real humans, and avoids nuking everyone behind the same IP.

Don’t Panic — Here’s How to Fix It in Minutes