Introduction

A passive recon story — no exploitation, just observation, and three CVSS 9.8 vulnerabilities staring back at me.

If you’ve been in security long enough, you know the feeling. That creeping sense that things are moving faster than anyone can reasonably…

Observation

Every year, enterprises invest heavily in security programs, including threat modelling, vulnerability management, and compliance audits…

Platform: TryHackMe
Room: Python: Simple Demo
Room URL: https://tryhackme.com/room/pythonsimpledemo
Difficulty: Easy
Please attempt the…

“The scariest software bugs are the unknown ones.”

Learn about the critical OpenVPN Connect macOS vulnerability (CVE-2026-9560) that allows local privilege escalation, and how to patch it now.

That innocent XML import feature could be a direct line to your /etc/passwd and internal cloud metadata. Learn to spot XML parsing…

The invoice generator doesn’t show errors. The image fetcher hangs on invalid IPs. But with a single <iframe> and a JavaScript redirect…

A normal invite feature revealed registered accounts, internal GraphQL identifiers, and user metadata through an overly detailed API…

Learn how to detect and exploit SQL Injection vulnerabilities.

Bug bounty hunting in 2026 is no longer just about manual testing or running a few scripts.

Client-Side Injection(Advanced): How Small Bugs Lead To Big Bounties(SSRF , Prev Esc , KeyLogger , 30XSS)

WhoAmI

Password spraying is an authentication attack technique where an attacker tries a small number of common passwords against a large number…

A business logic flaw. A Burp Suite intercept. And the first Hall of Fame of my life.

A Simple and Working Setup for Every Apple Silicon Macs (M1, M2, M3, M4, M5)

Task 1 : Introduction

How TryHackMe’s Pre-Security Path Actually Helped Me Understand Cybersecurity # How TryHackMe’s Pre-Security Path Actually Helped Me Understand Cybersecurity When I first got interested in …