While testing a web application I found a race condition in its project creation feature that allowed me to create nine projects with the…

From ;id to JVM diagnostics, every way an OS command sneaks in.

A Web Application Firewall (WAF) is designed to protect applications from malicious traffic, block attacks, and strengthen an…

Guests who stayed at a Sheraton, Westin, W. Hotels, St. Regis, Four Points, Aloft, Le Meridien, Tribute, or Element hotel between 2014 and…

And yes, it is quite fun.

СTF: TryHackMe — Smag Grotto Author: Davud Qasimov Target IP: 10.82.148.200

How I used Nmap, Kali Linux and Ubuntu to move from network reconnaissance to evidence-based security findings.

An open-source tool that runs Locust, k6, JMeter or Artillery on EC2 instances around the world, merges the results, and cleans up after…

Cybersecurity Lead & Cryptographer. Zero-Knowledge Proofs (ZKP), FIPS-204 Enclave Protection & Post-Quantum Network Defense. Infrastructure…

While testing an authentication flow, I discovered an OTP verification bypass that allowed the login process to continue without entering…

A step-by-step guide to finding Business Logic Vulnerabilities — the bugs that live in how an app thinks, not in its code

Hello fellow security researchers and bug bounty hunters!

I find it super weird .. cause i remember when i was 16 or 17 years old when i was obsessed with hacking into any machine i could find …

After months of preparation and testing, the demo build is finally ready to go. As of today it’s in Steam Next Fest, and the free demo is…

A deep dive into reverse engineering Meta’s unreleased AI agent, breaking its 15-state activation gate, and uncovering critical…

Passing Hack The Box’s Certified Web Exploitation Specialist (CWES) was a milestone in my web penetration testing journey. It tested my…

What is FFUF?

No. X ended its free tier in February 2026. Here are the 4 ways that still get you tweets for $0, and the ones that stopped working.

Open any modern web application in your browser, right-click the page, and view the raw HTML source. Scroll past the meta tags and…

Summary