Hello Community👋, I’m Divyank Sitapara, an Application Security Researcher and Bug Bounty Hunter. This is my 3rd write-up, where I’ll…

CyberScurity

Imagine you are checking your website or computer logs and suddenly you see an IP address you do not recognize.

Introduction

Room: TryHackMe — CTF: Jackpot Overflow

Welcome back, fellow cybersecurity enthusiasts! Today, we are breaking down the OSI Model room on TryHackMe.

Roundcube shipped two security updates this week. Also, versions 1.6.18 and 1.7.3 close eleven separate bugs. The worst Roundcube webmail RCE flaw sits in a spam-training plugin. Why It Matters We…

SpaceXAI recently unveiled the Grok 4.6 AI model series. This advanced lineage specifically enhances the model’s capacity for long-horizon tasks. It also targets software engineering and int…

I pointed Opus 4.6 and GPT-5.6 Sol at a big, hardened open source project and told them to hunt for zero-days. Opus 4.6 out-counted GPT-5.6…

You don’t need an expensive external engagement to test your defenses. You need a specific mindset and a few free tools.

Whether you are an aspiring penetration tester, a budding SOC analyst, or simply a technology enthusiast, a solid foundation in computer…

What’s up everyone! Nitin here 👋

I started bug bounty hunting two years ago knowing absolutely nothing. No formal training, no course just YouTube. I didn’t grind through…

Okan YILDIZ Global Cybersecurity Leader | Innovating for Secure Digital Futures | Trusted Advisor in Cyber Resilience | Aug 2026

Use Hydra to brute-force credentials on a web form

Login pageSQL injection — Filter bypass

A practical pipeline for narrowing thousands of URLs down to the handful worth manually testing for Cross-Site Scripting.

Apache patched five bugs in Struts 2 this week. Three of them count as Apache Struts DoS flaws that a remote user can trigger. The other two leak data through a shared state bug in the JSON plugin…

Learn web encoding with practical examples of URL, HTML, Unicode, UTF-8,Base64, Hex, and serialization for web security

Introduction

While testing a public bug bounty program, I came across an interesting file: