I tried to watch my phone’s traffic from an Ubuntu VM. Here’s what worked, what confused me, and what I learned.

If you haven’t guessed, I am a huge JJK fan

The new agent communication protocols are repeating the unsigned-API era of the 2010s.

Server-Side Request Forgery (SSRF) is one of the most dangerous web application vulnerabilities because it allows attackers to make a web…

🔗Room Link : https://tryhackme.com/room/md2pdf

🔗Room Link : https://tryhackme.com/room/agentt

Lab can be found at: https://webverselabs-pro.com/

With the rapid growth of web applications, cybersecurity has become a major concern. One of the most common and dangerous threats is SQL…

Bee

Author: Nilanjan Chowdhury

During a testing, we came across this situation:

SQL injection was first documented in 1998. Google was two months old. And yet this ancient trick is still the #3 most critical web…

Introduction

It was 2:00 AM, and my terminal was a blur of scrolling green text. I was deep into a private bug bounty program for a massive corporate…

بسم الله الرحمن الرحيم, السلام علیکم

Introduction

Hey folks, I am back with a new writeup. This one is about how I found a Broken Access Control issue on a WHO subdomain using Google…

This was the first bug I discovered in a employee managment web application. After discovering the bug, I responsibly reported it to the…

A practical Shodan recon guide for every component in the modern ML serving pipeline from model servers to vector databases to notebook…