Security Information and Event Management — better known as SIEM — is one of the most critical systems in modern cybersecurity. It…

JSON Web Tokens (JWT)

Last month I discovered a vulnerability in a private healthcare program that rewarded me $$$$ through their bug bounty program.

Cybersecurity researchers at Veracode reveal a typosquatting attack that disguises Pulsar RAT as images to bypass Windows security and antivirus programs.

Modern applications love WebSockets.

This website has an insecure CORS configuration in that it trusts all origins.

Coupon code exploitation !!

Modern applications love WebSockets.

A hidden tracking endpoint trusts HTTP headers it should never trust: here’s how to exploit it

Sistemin Kuralını Değiştirin: Hacker Mantığı ile Kuralları Yeniden Yazma Sanatı --- Kodun Ötesindeki Dil Günümüzün dijitalleşmiş dünyasında “hacker” kelimesi, genellikle …

Here is our challenge where we have to use ROP vulnerability as mentioned in the description. We can start the instance and download the…

Here I use the challenge from PicoCTF

A newly disclosed data breach impacting more than 16 million accounts has placed PayPal back under intense scrutiny, sending ripples across…

If you find value in my cybersecurity writing, you can support my work here:

From college workshops to investigating continent-wide ATM malware operations, Rahul Tyagi has lived the full spectrum of cybersecurity.

What is Cybersecurity? A Beginner’s Guide

Siber güvenlik yolculuğuna ilk başladığımızda hepimiz heyecanla o meşhur araçları kuruyoruz: Nmap, Metasploit, Burp Suite… Kabul edelim, bu…

Modern applications rely heavily on APIs for tasks like authentication, data exchange, and system integration. However, when input…

Over 2024–2026, I’ve written Medium posts related to reconnaissance topics: domain enumeration, content discovery, search-engine dorking…

Based on the original report by natann on HackerOne: https://hackerone.com/reports/3417819