Introduction Insecure Captcha adalah salah satu fitur latihan keamanan di Damn Vulnerable Web Application (DVWA) yang menunjukkan bagaimana…

In the hands of a curious mind, Google transforms from a simple search engine into a powerful reconnaissance tool — thanks to the technique…

Hello and welcome everybody!

So, the other day after another impotent SQA role interview session where I failed to implement a problem solving in Python code — out of…

When I first dipped my toes into API Pen-Testing, I assumed attacking an API would feel just like testing a website, only with fewer…

I started by running an Nmap stealth scan to avoid detection and identify any open ports. The scan showed that port 8080 was open and…

In this project, I took on the role of an ethical hacker to demonstrate how a simple web vulnerability can lead to a full-scale cloud data…

اللَّهُمَّ ‌صَلِّ ‌عَلَى ‌مُحَمَّدٍ ‌عَبْدِكَ ‌وَرَسُولِكَ

My Journey Compromising a Vulnerable Machine (And What I Learned)

This hands-on project explores vulnerability scanning through practical implementation. We’ll install Nessus on a Kali Linux virtual…

When I first started exploring API security, I assumed authentication was solid by default. After all, if there’s a login endpoint and…

What is React2Shell (CVE-2025–55182)?

Free Link 🎈

Existing scanners miss CVE-2025–55182 in serverless Lambda deployments.

How a Forgotten QA Page Led to an $800 Bounty: Unauthorized Document Access Before starting with the blog, i would like to introduce myself a bit. My name is Gopi and i hold a Bachelors degree in …

How two critical vulnerabilities in Google Drive’s third-party integration system exposed millions of users to XSS and SSRF attacks

Free Link 🎈

Who Am I?

Hello everyone 👋

Recentemente fiz uma room no THM chamada “Chaining Vulnerabilities” e acho que vale a pena escrever um pouco sobre ela.