Open redirects are among the most commonly overlooked vulnerabilities in web applications. While they might seem simple on the surface…

‏##Introduction

The Discovery

This writeup documents a hunting session where I found 6 critical vulnerabilities in roughly 6 hours(Real-World Cases with explanation)…

Modern WAFs often block the word “alert” in XSS payloads, but JavaScript’s flexibility lets you reconstruct it dynamically. Here are three…

When I first started learning smart contract security, I felt behind all the time.

Let’s learn about Zip Slip — an interesting and critical arbitrary file overwrite vulnerability leading to RCE in certain scenarios!

In the world of Bug Bounty, widely used CMS platforms like WordPress often become prime targets for security researchers due to their…

The most alarming cybersecurity story this week isn’t about a nation-state attack or a billion-dollar breach. It’s about a Tuesday morning…

By Sivaaditya Panuganti Founder, Aditya Security Labs

Introduction

Offensive Security • Red Teaming • Threat Intel

The Library of Leaks represents a groundbreaking shift in how the public can access previously classified and leaked information from…

Top Bluesky SOCMINT Tools-OSINT

Challenge: HAWK_II Category: Cryptography Difficulty: Medium Flag: 0xfun{tOO_LLL_256_B_kkkkKZ_t4e_f14g_F14g}

A step-by-step guide to exploiting Local File Inclusion (LFI) on the Valenfind challenge, part of the TryHackMe Love at First Breach 2026…

Pendahuluan

The Assignment: ================

Forget the firewall for a second. If your router’s basic configuration is weak, your entire security stack is built on sand.

Author: Berend Watchus. Independent non profit AI & Cyber Security Researcher. [Publication for: OSINT Team, online magazine]

Kalian perlu konteks dlu nih…