Three nights, a lot of coffee, and one SQL injection that refused to stay small.

Lately, I’ve been wanting to dive deeper into web vulnerabilities to truly understand how they arise in today’s modern web applications.

A modern, bilingual, glassmorphic Single Page Application designed for Pentesters, Security Researchers, and Developers.

A beginner-friendly, practical walkthrough of how NoSQL injection works, why it’s often overlooked, and how to actually test for it.

In Part 1 of this series, we examined 12 web security vulnerabilities and weaknesses involving JWTs, Java configuration, TLS, HTTP request…

Bug bounty hunting often involves repeating the same reconnaissance tasks across different targets: discovering subdomains, checking open…

JWTs (Json Web Tokens) is basically a digital token that allows a server to identify an authenticated user without asking for the username…

Testing a Banking API Against the OWASP API Security Top 10

A plain-language tour of the ten ways your app most likely gets owned — and the small code changes that stop them.

A web or mobile application can look secure on the surface and still contain weaknesses that an attacker could exploit. Modern applications…