CSP (Content Security Policy) is one of the strongest defenses against XSS attacks because it lets the browser restrict what code is…

What is React2Shell Vulnerability?
This vulnerability affects React Server Components (RSC) and the frameworks that implement them…

A Practical Web Application Security Testing

Sometimes, finding a real bug doesn’t require advanced exploits or zero-days.

Lab 1: Basic SSRF Against the Local Server

I had an insightful conversation with Mohit Panwar sir that changed my perspective on product security. He told me something very simple…

This is what happens when you trust the client too much.

First and foremost, I am Thankful to GOD! 🙏✨ I’m excited to share that I have successfully solved the Single-endpoint race conditions lab…

Web application security is one of the most important areas of cybersecurity. Many modern applications rely on authentication systems to…

A practical PortSwigger lab walkthrough for UNION-based SQL injection

Launching a web application into production is an important milestone for any startup.

The OWASP Juice Shop is arguably the most modern and sophisticated “insecure” web application for security training. Recently, I completed…

Plus: How to Contact a Cybersecurity Expert When Your Site Gets the Red Screen of Death

From Contact-Us to Critical — How I Earned My First €2,000 in Bug Bounty🔥 How a simple contact form and one random thought led me to discover my first Critical vulnerability. I opened the …

Hii everyone, after a long….. I know i Know…..

Who Am I?

Hii all, I’m Ashvin Chouhan — currently in my 3rd year of a Bachelor of Technology, trying to become a security researcher.

Executive Summary

Introduction