I have been working extensively with GitHub leaks lately, and it is easily one of the most common things that can go wrong in modern…

One of the biggest misconceptions about bug bounty hunting is that valuable vulnerabilities are discovered using “advanced hacker tricks.”

Plugin Abuse. Excessive Agency. Overreliance. Model Theft. The vulnerabilities that only exist because we handed the LLM a keyboard and…

Executive Summary

Machine: SickOs 1.2

HackTheBox | Windows | Medium difficulty | Active Directory | ADCS ESC1

Scapy is powerful python library where you can Manipulate the packet. Think of it like if you use up a normal ping; Its generate its IP…

Introduction

One thing enjoy throughout my cybersecurity learning journey is discovering how closely security and QA overlap.

Introduction

The bug bounty landscape in 2026 looks nothing like it did five years ago. What used to be a field where a sharp eye and a copy of Burp…

The invoice generator doesn’t show errors. The image fetcher hangs on invalid IPs. But with a single <iframe> and a JavaScript redirect…

The Plan, the Order, and the Bill

A writeup for “Post-Exploitation CTF 1” from the official eJPT course.

A writeup for “Operation Coldstart” on TryHackMe.

EC-Council put the words “world’s first ethical hacking certification to harness the power of AI” on the CEH v13 marketing page. That kind…

Why your tiering programme is measured in graph edges, not OU structure.