LFI exploit leads to admin key and database flag retrieval.

## Introduction

In today’s digital world, cybersecurity has become one of the most important fields in information technology. With the increasing use of…

Lately, I’ve been constantly checking social media platforms like “X” or “Twitter.” For some reason, it’s been really exciting to check X…

Yapay zekalar herşeyi biliyor ama herşeyi söylemiyorlar. Etik kurallar , güvenlik duvarları ve kısıtlamalar… Peki bir yapay zekaya uyması…

Pendahuluan

Introduction Insecure Captcha adalah salah satu fitur latihan keamanan di Damn Vulnerable Web Application (DVWA) yang menunjukkan bagaimana…

In the hands of a curious mind, Google transforms from a simple search engine into a powerful reconnaissance tool — thanks to the technique…

Hello and welcome everybody!

So, the other day after another impotent SQA role interview session where I failed to implement a problem solving in Python code — out of…

When I first dipped my toes into API Pen-Testing, I assumed attacking an API would feel just like testing a website, only with fewer…

I started by running an Nmap stealth scan to avoid detection and identify any open ports. The scan showed that port 8080 was open and…

In this project, I took on the role of an ethical hacker to demonstrate how a simple web vulnerability can lead to a full-scale cloud data…

اللَّهُمَّ ‌صَلِّ ‌عَلَى ‌مُحَمَّدٍ ‌عَبْدِكَ ‌وَرَسُولِكَ

My Journey Compromising a Vulnerable Machine (And What I Learned)

This hands-on project explores vulnerability scanning through practical implementation. We’ll install Nessus on a Kali Linux virtual…

When I first started exploring API security, I assumed authentication was solid by default. After all, if there’s a login endpoint and…

What is React2Shell (CVE-2025–55182)?