Detection engineering is both a role and an activity. It’s the discipline of building and maintaining the logic that identifies malicious or risky behavior within your organization. It’s where security analysis meets software engineering, turning raw logs…

If there’s one vulnerability class I have truly fallen in love with as a bug bounty hunter, it’s Information Disclosure. You don’t need…

What was fixed, how to check your exposure, what to do first, and how to hear about the next one early. Status as of October 22, 2026.

What PHP2Shell (and other bugs) have taught us about automated CVE analysis, unreliable public PoCs, and the continuing importance of…

An Easy-rated Linux CTF covering Local File Inclusion, PHP command execution, MySQL enumeration, Linux privilege escalation, and a return…

Author: Ratbully Platform: bWAPP (Broken Web Application) Lab/Module: Broken Auth: Forgotten Function Category: Broken Authentication /…

A detailed, practical method to test rate limits properly — and the tricks that actually bypass them

I ran Snyk, Semgrep, Drogonsec and Claude Code on 39 planted bugs. The answer was more interesting than yes or no

On October 21, 2026, two software bugs took over my entire feed. Security researchers are calling the pair PHP2Shell, and they carry a…

Two bugs in the language behind most of the web, explained in plain language and in a comic strip.

Welcome to this new Medium post, today we are going to explore a shellcode execution technique that abuses SetupIterateCabinet(a Cabinet…

CTF Name : Pickle Rick Plateform : TryHackMe Author : ZODiAK

Crack the Hash: A Beginner’s Guide to Hashing and Password Cracking

From a hidden stego passphrase to root, via SQL injection and an abandoned screen session.

Esse artigo é um write-up do desafio pwn108 da TryHackMe. Esse desafio faz parte da sala PWN101 de exploração de binários. O link da sala é…

It fits in your pocket, runs on a battery, and can audit a network without..

1. Who are SmatchoiceHackers? | The Global Elite Hacking Collective SmatchoiceHackers is a prominent, versatile network of professional…

CVE-2026–111497, Node.js’in bundle ettiği Brotli decoder’daki bir out-of-bounds write zafiyetidir. Node.js project bunu “remote code…

Ngl, sebelumnya aku mikir begini. Android kan udah punya banyak proteksi bawaan, jadi aplikasi apapun yang jalan di atasnya pasti ikut…

Task 3