Hello Hackers! 👋

How a simple authorization flaw in a popular email marketing platform could have exposed sensitive campaign data across thousands of…

If you’re a beginner looking at smart contract auditing and wondering whether the opportunity has already passed, this article is for you…

‏ ‏ ‏Imagine receiving a refund for an order you never purchased. ‏ ‏No stolen credentials. ‏No payment bypass. ‏Just a system that failed…

In Part 1, we explored Reflected Cross-Site Scripting (XSS) and how unsanitized user input can be immediately reflected and executed in a…

What to do when everyone sees a way except you?

CTF Challenge — OSINT

For years, organizations treated authentication as the ultimate security checkpoint.

And my way through it

Automating Recon with a Python CLI

💘 ❣️ My Dearest Hacker, 🍒 Spread the love this Valentine’s Day with CupidCards — the web app that lets you create personalised Valentine…

In this walkthrough, I’ll explain the exact step-by-step process I followed to solve this CTF machine and capture all the flags.

This is an easy-rated room featuring a web challenge.

HTB Challenge

How a simple password reuse issue became my first valid AWS VDP report.

What is phpinfo()?

In the modern web, servers are no longer just static vaults, they are talkative agents. As traditional They fetch images from URLs, query…

Di era serangan siber modern, pelaku kejahatan tidak selalu mengandalkan celah teknis yang rumit. Banyak serangan justru berhasil karena…

Path Traversal vulnerability ?

We built pentesting tools for LLMs. But agents aren’t LLMs. They have tools, memory, and multi-step reasoning. That’s a fundamentally…