Hello Everyone,

From recon to flag capture: a breakdown of my solutions.

The Concept
An open redirect happens when an application takes user input (usually a URL in a parameter) and uses it in a redirection…

A random phone number. A wrong OTP. Two years, no fix.

The first viruses targeting ELF files (the primary format for executable files under UNIX) were first detected in the late 1990s, and their…

The first time a client asked me “can we afford to find out if we have a problem,” I did not have a good answer.

In the software world, some bugs cause your application to crash suddenly, and since the problem is obvious, you can fix it. However, some…

Your weekend magazine for Information Security & Data Privacy!

ColdBoxEasy is a beginner-friendly Linux box on OffSec PG Play built around a sloppy WordPress setup. Enumeration turns up a hidden…

EvilBox: One is a machine that chains web enumeration, file read via a PHP web shell, and a classic /etc/passwd injection into a clean root…

Hey everyone, in this article, I’ve curated all the instances of PII and information disclosure through JS files. Hope you enjoy reading…

Exploring vulnerable SSH configurations safely inside a local pentest environment

A deep dive into a Time-of-Check to Time-of-Use (TOCTOU) flaw during application setup, and the debate between “Internal Tools” vs. Zero…

The moment I stopped chasing every new tool and trend, learning finally became calmer.

Cybercriminals are ramping up football fan scams and World Cup 2026 fraud. Protect yourself from fake merchandise, phishing, and lottery traps today.

Three stories from the same week reveal the same reality: vulnerability discovery and exploitation are accelerating faster than…

Vigolium: The Open Source Vulnerability Scanner Bringing AI Powered Pentesting Introduction Traditional vulnerability scanners have been a cornerstone of application security for years. Vigolium …

Link — https://tryhackme.com/room/aithreatmodelling

Tags: ios-security ssl-pinning mobile-pentesting frida objection burp-suite ethical-hacking cybersecurity bug-bounty infosec

Threat Modelling Your AI Chatbot Like a Pro

Introduction