Understanding GraphQL architecture, reconnaissance techniques, and common security vulnerabilities.

High Severity Vulnerability with $XXX Bounty

This lab shows a vulnerability in a GraphQL implementation where users can access sensitive fields because the queries are not properly…

Introduction

What’s up everyone! Nitin here 👋

The paradigm shift toward dynamic database architectures has fundamentally changed how modern web services communicate. For years, system…

Bug Bounty Write-up | Information Disclosure | GraphQL Security

Learn GraphQL fundamentals and why every pentester should understand GraphQL before testing modern APIs.

This is Part 2 of an ongoing series where we’ll learn GraphQL from an attacker’s perspective. Each article builds on the previous one, so…

In this lab from PortSwigger’s Web Security Academy, the goal was simple: find the hidden private blog post and extract its secret…

Series Overview Part 1 — Recon, Discovery & Mapping the Attack Surface Part 2a — Breaking Authentication & Authorization Part 2b —…

Most of mine got closed as "informational." These five actually pay - from a $5K IDOR to a $12,500 account takeover. Plus what to skip.

Still an Admin. Just Not Officially

Disclaimer:This write-up describes a vulnerability that has been responsibly disclosed and fixed by the affected organization. All domains…

A real-world bug bounty walkthrough on how skipping WebSocket recon is leaving money on the table — and how I found a P1 by going where…

Disclaimer:This write-up describes a vulnerability that has been responsibly disclosed and fixed by the affected organization. All domains…

Chaining unauthenticated mutations, GraphQL batching abuse, and IDOR into full cross-tenant compromise

How a seemingly harmless GraphQL query exposed private user history and highlighted the importance of authorization in nested resolvers.