SVG uploads are a fun attack surface! Most testers check for XSS, but what if the Content Security Policy (CSP)is set to script-src: none?

Keamanan siber kini menjadi salah satu sektor yang sangat dibutuhkan dalam era digital saat ini.

Description : Explore vulnerability databases, their importance, and practical usage during pentesting.

Generation Z has a fundamentally different relationship with education than any generation before it. Where previous generations accepted…

How Modern Breaches Happen Without Malware, Exploits, or Even Breaking In

Part 2 of my AWS pentesting series. In Part 1, I covered IAM enumeration from scratch. This post focuses on S3 — what it is, why it’s a…

The Challenge with Traditional Penetration Testing

Welcome to the WhyWriteUps articles, where we explain every step we made and why we made it. I have been solving machines for quite a bit…

Stablecoins run 24/7, forcing a shift to always-on controls as risks move beyond custody into execution layers, APIs, and multi-system authority management.

And if you already started and haven’t found your first bug yet — this is exactly why.

When Your Guard Dog Bites: Understanding the BlueHammer Zero-Day in Microsoft Defender

Spoiler: It’s not just because your battery died at 40%.

Next we get hostname/domain via SMB

OTP scams are one of the most common frauds in India.

Using what students love to shape who they are becoming

Hi everyone, In case you were wondering what I have been up to these days, I am still developing as usual. But over the past few months, I…

Author: Nilanjan Chowdhury

Technical Guide for Usage, Attack Testing, Scenario Authoring, and Vulnerability Module Development

Command injection is a critical vulnerability where user input gets passed directly to system commands, letting attackers execute arbitrary…