In today’s fast-paced digital world, Java training stands out as a gateway to lucrative tech careers. Whether you’re a fresh graduate or a…

BOLA/IDOR is the #1 API vulnerability on OWASP’s list. Most backend developers ship it constantly without knowing its name.

TL;DR Researcher Kirill Firsov disclosed a fastjson RCE on July 19, 2026. It affects fastjson 1.2.68 through 1.2.83 under stock default settings. Full technical details are public, and third parti…

Review Spring Boot source, find the framework-specific sinks, and exploit each on the lab machine.

22nd July 2026, Netherlands — Certificates are commonly used to secure communication between applications, APIs, databases, message…

The problem nobody talks aboutICLR 2025 IRIS Paper All Miss

There’s no shortage of options for building an API in 2026. Node.js, Go, FastAPI, Kotlin, Rust — all of these show up in production, all of…

110,000 combined stars. Zero authorization findings from the industry-standard scanners. Here’s what a purpose-built tool found instead.

Apache patched five bugs in Struts 2 this week. Three of them count as Apache Struts DoS flaws that a remote user can trigger. The other two leak data through a shared state bug in the JSON plugin…

1. Overview

From here you can access the room: https://academy.hackthebox.com/app/module/41

Over the past year I worked through two internal security reviews on a production Spring Boot service, closing nine High-severity findings…

I needed to support SMB protocol in VirtuProbe, and decided to ejnoy another RFC and code my own client library.

Yapay zekâ destekli kod geliştirme araçları artık yazılım geliştirme süreçlerinin önemli bir parçası haline geldi. Bir REST API oluşturmak…

A Principal Engineer Design Paper for Spring Boot, OAuth2, Multi-Tenancy, Kubernetes, Supply Chain, and Security Operations

What a last-minute security finding taught me about shipping software responsibly.