There’s a quiet kind of bug that doesn’t crash your app, doesn’t throw logs, doesn’t scream for attention but slowly opens the door for…

Traffic doesn’t lie. It whispers, leaks patterns, builds habits and when something shady slides in, it breaks rhythm.

Need to save a video from X (formerly Twitter) quickly? Whether it’s a funny clip, an important thread, a tutorial, or your own content…

My first bug bounty write-up — an IDOR that let me bypass email-based activation by using credentials the server handed over for free.

Hi everyone! 👋 This is my first write‑up on Medium, and I’m excited to share a vulnerability I found during a pen test project.

Cybersécurité : les 8 actualités majeures du 12 avril 2026 L’essentiel de la semaine : la sélection des 8 faits marquants qu’il ne fallait pas manquer pour la semaine du 12 avr 2026. 👉 …

Hello, Cybersecurity enthusiasts and white hat hackers!!

Introduction

In this article, I’ll walk you through how I solved a PortSwigger lab based on a very common and dangerous vulnerability: Insecure Direct…

The cybersecurity landscape in 2026 has been rocked by a series of high-impact incidents that expose a dangerous convergence: trusted…

Using DataHound to create Hybrid Edges for BloodHound

Recently, I completed the Summit challenge on TryHackMe, a purple-team simulation that puts you in the shoes of a security engineer.

If you’re reading this, hello again! I finished up Hack the Box’s Sauna. This one went a lot quicker than I had anticipated. As I mentioned…

Difficulty: Medium | OS: Linux (Ubuntu) | Date: 2026–04–01

Difficulty: Hard | OS: Linux (Ubuntu 24.04) | Points: 40 | Date: 2026–04–02

Overview

While trying to make a hotel reservation, I unexpectedly found myself in the middle of a critical security vulnerability. In this article…

A critical CVSS 10 flaw in Axios (CVE-2026-40175) allows attackers to bypass AWS IMDSv2 and achieve RCE via header injection. Upgrade to v1.15.0 now!

How a simple replay trick bypasses permission checks on a popular project management platform

We continue our series of Hack the Box-Starting Point boxes with box 03: Dancing. Let’s get started!

Most AI tools answer questions. Rowboat tries to remember your work, organize it into a living knowledge graph, and then act on it. That…