Hi, I’m Vipul — the human behind TheHackersLog.

Introduction

SQL Injection is one of the classic web application security vulnerability, and Blind SQL Injection takes the same underlying weakness a…

You patched, you planned, you rolled out MFA — and attackers still waltz in. Sound familiar? Despite billions invested, nearly 40% of…

What I learned building a tool that refuses to say “possible RCE”

How I found a bug in a file download feature that could let one tenant access another tenant’s files.

Introduction

Five critical bugs, one overconfident app, and a reminder that encryption is not a personality.

What’s up everyone! Nitin here 👋