Hello everyone! This marks my third writeup on Medium. My goal is to stay consistent, tackle more challenges, and keep learning and I’m…

Difficulty: Trivial | Flags: 1 | Category: Information Disclosure

We will traverse the roads of HTTP together covering request, response, error codes and much more.

In 2026, bug bounty hunting will involve more than simply manual testing, recon scripts, and conventional payloads. AI has fundamentally…

Pengujian penetrasi keamanan aplikasi Android dilakukan terhadap AndroGoat dengan fokus pada identifikasi potensi kerentanan pada aplikasi…

I’ve watched Rust go from that hip new systems language to the default choice for performance-critical backends, CLIs, and even embedded…

Shot by JK Studios in TGU, HN.

Cybersecurity in 2026 is no longer about memorizing definitions or collecting certificates like trophies. The field is moving too fast for…

A beginner’s walkthrough of performing a full penetration test lifecycle in a safe lab environment

Wi-Fi is often an overlooked interface during automotive VAPT (Vulnerability Assessment & Penetration Testing), but it becomes latent risk…

Understanding networks is one of the most critical skills in ethical hacking. Before launching scans, enumerating systems, or mapping…

Step into the world of cybersecurity with confidence. This GSEC Practice Tests 2026 course is designed to help you master real exam…

Introduction: The Shift in Cyber Attack Strategies

Why CISSP Is Still the Gold Standard

Hi! In my spare time, I’ve been participating in the Helium Challenge Batch 2 event organized by Cyber Academy, and in this article I’d…

Vulnerability
Browser Back Button

It is the ultimate bug hunter heartbreak. You spend hours tearing apart a complex FinTech application, bypass a notoriously strict Web…

CORS Misconfiguration (Critical 9.3) + Subdomain Takeover (High 7.5)

Qualifier CTF Write-Up