This write-up is based on a training scenario from LetsDefend and is shared for educational purposes only.

131 new vulnerabilities drop every single day. Here’s how I decide which ones are worth my time and effort.

What is Savastan0? Risks of Using Illegal CC Shops Explained Introduction Searches for terms like Savastan0, savastan.biz, www-savastan0.tools, and other similar variants have grown as people try to …

Summary

Every single year I tell myself the same thing. Surely this is the year things get better. Surely companies have learned by now. Surely…

CTF Writeup

They told us AI was going to take our jobs. Nobody mentioned it’d try to take our root access too.

Scenario: You are a security engineer at Meridian Security Group. The company deployed an internal AI assistant, Bastion, to help employees…

Explore how data poisoning alters AI embeddings and retrieval results without visible errors.

Hey everyone! Today I’m sharing how I solved the Footprinting Lab — Easy on Hack The Box. This lab is all about enumerating services and…

By Karanam Shrivasta 15-Year-Old Cybersecurity Enthusiast

When approaching a Windows system during an engagement, the first objective is simple: understand the environment before interacting with…

The “Web Gauntlet 2” challenge from picoCTF builds on the original Web Gauntlet, but introduces a small twist that makes it more…

Firebase security rules are opt-in. The default, for every new database & storage bucket, is wide open. This is the writeup of a…

I Asked a Public API a Question It Wasn’t Supposed to Answer — And It Told Me Everything

There’s a category of bugs that doesn’t get enough attention. Not the ones that hand the attacker a session. Not the ones that leak data…

🚫 “' OR 1=1 --” Is Blocked? Good. You’re Finally Ready to Find Real SQL Injection Every beginner tries this: ' OR 1=1 -- And gets blocked. 👉 WAF stops it 👉 No error 👉 No response So …

The Boring Beginning

Bug bounty hunting, for me, is mostly about understanding how applications handle authentication. Login, registration, password reset…

A practitioner’s guide to running a compliant security test on Oracle Cloud Infrastructure

This article demonstrates the end-to-end process of building an Active Directory environment from scratch and performing structured…