Business logic flaws: Design flaws letting users manipulate workflows (like altering prices) undetected by automated scanners.

If there’s one vulnerability I keep running into during penetration testing, it’s Broken Access Control. It doesn’t always involve…

How Nebula Is Transforming Penetration Testing with AI, Local LLMs, and Intelligent Security Workflows

If you’ve ever integrated with Google, GitHub, Facebook, or any modern API and wondered “how does this login/authorization magic actually…

Hello Hackers,

i was wondering through HTB , when i found this easy type problem in the website , i looked through it and found something interesting …

Cross-Site Scripting (XSS) is one of those vulnerabilities that looks simple at first — but can have serious consequences when it reaches a…

So, This is What Happenss When a Rejected Applicant Knows Offensive Security.

As web applications have become an essential part of daily life, security issues have also become more visible. The processing of user…

Lets start our 4th Web Exploitation Challenge.

আজ আমি PortSwigger Web Security Academy-এর “Finding and exploiting an unused API endpoint” lab successfully complete করেছি।

Cyber threats are becoming more advanced every day, making cybersecurity a priority for businesses of all sizes. Choosing reliable…

Este writeup documenta el proceso paso a paso para comprometer un servidor objetivo. Más allá de mostrar qué comandos se ejecutaron, el…

Concierge Briefing

TASK 2: Hacker Holidays: Day 0

Difficulty: Very Easy Category: AI Security Topics: Prompt Injection, Prompt Leakage, Social Engineering, LLM Security

A walkthrough of TryHackMe’s “The Concierge Knows Too Much” — Very Easy, 45~ points, AI category — from the Hacker Holidays event at the…

Today’s room was about exploring prompt injection, role confusion, and sensitive information disclosure in LLM applications.

Pyramid of Pain — More Than Just Blocking Attacks

Room link: https://tryhackme.com/room/hh-theconciergeknows-2d7eb4d9

Platform: TryHackMe