Dalam dunia aplikasi web modern, OAuth telah menjadi standar untuk fitur “Social Login” (Login dengan Google, Facebook, dkk). Meskipun…

While testing a bug bounty program on HackerOne, I discovered a forum where users can interact with each other. The forum allows users to…

✍️ Introduction

Some vulnerabilities start with complex exploit chains. Others start with a profile picture upload.

No complex payloads.
No SQL injection.
No brute force.

Cybersecurity has always been a cat-and-mouse game between defenders and attackers. But in late 2025, the mouse got superpowers. A lone…

“How many users can your API actually handle?”

When Burp/ZAP Miss Traffic: Debugging HTTP/2 Issues in a Web App

Title: My First Penetration Testing Agreement — What I Built and What I Learned. The Assignment As part of my cybersecurity learning journey with #ParoCyber, I was tasked with drafting a …

Room Link: https://tryhackme.com/room/letter
Difficulty: Easy
Category: OSINT / Historical Research

Task 1 Introduction:

Introdução

Learn what Operational Technology (OT) and Industrial Control Systems (ICS) are, and how they function.

In this Write-up, We will explore how computers represent numbers and colors. Data Representation room by TryHackMe

Date: 17/04/2026

The “death” of bug bounty hunting has been predicted every year since 2015. Yet, here we are in 2026, and the industry is more lucrative —…

Lab can be found at: https://webverselabs-pro.com/

The structure of marketplaces in hidden networks often raises more questions than answers. While headlines tend to focus on sensational…

The first time I tried to run a real incident-response exercise in my lab, I pulled an EVTX file off a compromised VM, opened it in Event…

Why “Black Box” Testing is Never Truly Blind

In the world of cybersecurity, the difference between a hero and a hacker often comes down to one thing: authorization.