I started by running an Nmap stealth scan to avoid detection and identify any open ports. The scan showed that port 8080 was open and…

In this project, I took on the role of an ethical hacker to demonstrate how a simple web vulnerability can lead to a full-scale cloud data…

اللَّهُمَّ ‌صَلِّ ‌عَلَى ‌مُحَمَّدٍ ‌عَبْدِكَ ‌وَرَسُولِكَ

My Journey Compromising a Vulnerable Machine (And What I Learned)

This hands-on project explores vulnerability scanning through practical implementation. We’ll install Nessus on a Kali Linux virtual…

When I first started exploring API security, I assumed authentication was solid by default. After all, if there’s a login endpoint and…

What is React2Shell (CVE-2025–55182)?

Free Link 🎈

Existing scanners miss CVE-2025–55182 in serverless Lambda deployments.

How a Forgotten QA Page Led to an $800 Bounty: Unauthorized Document Access Before starting with the blog, i would like to introduce myself a bit. My name is Gopi and i hold a Bachelors degree in …

How two critical vulnerabilities in Google Drive’s third-party integration system exposed millions of users to XSS and SSRF attacks

Free Link 🎈

Who Am I?

Hello everyone 👋

Recentemente fiz uma room no THM chamada “Chaining Vulnerabilities” e acho que vale a pena escrever um pouco sobre ela.

Hello, fellow bug hunters! Grab a coffee, because this story starts with a simple email verification check and ends with a privilege…

اللَهُمَّ صلِّ وسَلِم وبَارِك على سيدنا محمد (ﷺ)

Wgel CTF — THM Writeup

TomGhost — THM Writeup

I am going to keep this post short and minimal as TCM PNPT has been around for a while now with several articles published about it. My…

The Complete Roadmap to Win32 API & Malware Development for Security Researchers