Why I Thought I Found a Zero-Day: The False Positive Trap in Bug Bounty

Broken Access Controls are everywhere. In application security, they show up in many different ways. Sometimes they come from poorly…

Why your Voyager ViewModels are getting stuck in the past, how to give them a fresh start every time.

HTB Cap — Walkthrough

Walkthrough of how attackers think about credentials from first recon to full Active Directory takeover. Based on the practical steps and…

A practical walkthrough of analyzing network traffic at the packet level

Software testing is often misunderstood as a final step before deployment — a checkbox in the development lifecycle. In reality, it is far…

XSS between HTML tags

Difficulty: 🟡 Practitioner

No malware. No exploit. Just PowerShell and RDP — and still a full compromise.

Difficulty: 🟡 Practitioner

Difficulty: 🟢 Apprentice

🎯 What is OAuth? {#what-is-oauth}

When performing web reconnaissance, some of the most valuable insights don’t come from scanning tools — they come from standardized files…

Back when I was starting my journey in ethical hacking, the first tool I played with was “Nmap”. Which is a well-known Network Mapping…

Phishing is the most common attack to gaining unauthorized access. It targets individuals and organizations instead of the security…

As tecnologias de inteligência artificial (IA) e aprendizado de máquina (ML) estão cada vez mais integradas a diversos setores, oferecendo…

A hands-on, locally hosted exploitation environment covering the OWASP LLM Top 10, no cloud API keys, no cost, just your machine and a…

Date: 14/04/2026

Search engines are not just for finding information — they are one of the most powerful OSINT (Open Source Intelligence) tools available.

Can you help contain the ransomware threat with the help of AI?