“I was just clicking buttons… and suddenly I had access to another user’s data.”
— Every bug bounty hunter at least once 😅

What is Mythos

47 intrusion attempts. 6 hours. One log file that changed how I think about network security forever.

MOVEit is in the news again.

Hiding web shells inside images, zip archives, and phar files to achieve remote code execution through LFI. Part 4 of the File Inclusion…

Learn about some of the technologies and designs that power private networks

The complete Field Guide — 2025 | 2026 Edition

I have to solve a lab in which we have to exploit the ShellTorch vulnerability to obtain the flag.

Writing PHP code into server logs and session files to turn a file read into full command execution. Part 5 of the File Inclusion series.

This isn’t just a story about a bug; it’s a story about the “Subdomain Graveyard” that dusty, forgotten corner of the internet where…

A 2015 mistake. A decade of quiet stubbornness. Finally I could get back my childhood.

It used to be the IT department’s problem. Now it is yours.

94% of cyber leaders say AI is the defining force in cybersecurity. Organizations using it strategically are cutting breach costs by $1.9…

Learn about the fundamental networking framework that determines the various stages in which data is handled across a network

Five certifications, a two-year hiatus, a handful of bug bounties, and why the ultimate hack was building my own mobile simulator.

I sat there, staring at the registration form.
All I wanted to do was register with [email protected], but the lab only accepted…

# Bypassing Password Validation Through Inconsistent Backend Logic While testing Plumsail authentication flow, I identified a business logic vulnerability caused by inconsistent password validation …

Bir web uygulamasına baktığınızda çoğu kişi sadece arayüzü görür.

The Shift to the Cloud: A New Frontier for Hacking As organizations migrate their infrastructure from on-premise servers to providers like AWS, Azure, and Google Cloud Platform (GCP), the nature of …

Müasir korporativ şəbəkələrin ‘onurğa sütunu’ hesab olunan Active Directory, düzgün konfiqurasiya edilmədikdə hücumçular üçün geniş bir…

This is a short note on a relatively niche topic. I am mostly writing it as a reminder for myself, and for the few people who, like me…