Today we will pwn Abducted from HackTheBox. It’s a medium-difficulty Linux machine by TheCyberGeek and kavigihan.

CodePartTwo is an Easy Linux machine that features a vulnerable Flask-based web application. Initial web enumeration reveals a JavaScript…

Difficulty: Easy

A practical cleanup workflow for old X posts, replies, reposts, and likes.

Why Don’t Proxy Settings Work Normally with Flutter Apps, Unlike Apps Built with Java or Kotlin?

There is a very specific feeling you get when you are reading security code and something looks almost right.

A new device code phishing campaign abuses Microsoft's OAuth flow to hijack Microsoft 365 accounts, no password stealing needed. How to spot it.

GlassWASM malware hides WebAssembly payloads in trojanized Open VSX extensions, abusing Solana memos for stealthy command-and-control.

In Part 2a, we broke down the auth and authorization layer, JWT attacks, IDOR chains, and mass assignment. This post picks up at the input…

How I Learned to Break JWT Authentication and Why You Should Test It Too

Where Automated Scanning Meets Manual Skill

I’m excited to share my new personal blog with you 🚀

Text Editing In Linux

Sometimes the universe just hands you a payout.

Platform: TryHackMe

Introduction

A student’s accidental dive into responsible disclosure.

Understanding OWASP Top 10: A Beginner's Guide to Web Application Security What if a simple URL change could expose thousands of user accounts? Imagine a small startup launches its new web …

How a single echoed header turned a default merchant account into admin on an internal Apache Airflow — and handed over the keys to…

Cazando Infraestructura C2, Automatizando la Extracción Forense de Certificados TLS con Python. Durante una auditoría de red de rutina, detecté tráfico anómalo hacia una IP sospechosa alojada en …

Going for the penetration testing course helps you know how to simulate legal cyberattacks on computer systems and applications to assess…