What Happened

I spent years ignoring XML parsers. Then I found an XXE vulnerability that exposed an entire company’s internal network. Here’s how to find…

Every bug hunter knows the unwritten rule of public programs: if a target looks picked clean, you’re usually wasting your time.

One curl-worthy array in a password reset request, and the researcher was logging in as anyone.

By Meznah

I responsibly reported an algorithmic-complexity issue in the extract_table function of py-pdf-parser to the maintainer. The report was…

The setup

Vulnerability Assessment and Penetration Testing, commonly called VAPT, helps organizations find security weaknesses and determine which…

Sunset: Decoy Walkthrough

Introduction

Hey Everyone, How you been? um.. I got lost for a little while. but i pointed the way back.

A few years ago- 2023-, I was testing an application whose name I’d rather not mention. During that process, I discovered that I could…

Lately, I’ve been wanting to dive deeper into web vulnerabilities to truly understand how they arise in today’s modern web applications.

Why Every Internet User Should Pay Attention

Lo que ocurrió después convirtió una evaluación controlada en un incidente de seguridad real.

Two labs had their AI escape containment in the same month. The government’s response was a meeting with no mandatory disclosure…

🚨 It’s 2 a.m. Your SOC gets an alert. A laptop in your Singapore office is beaconing to a flagged malicious IP — and the employee who owns…