Exploring how Zigbee, Bluetooth, Wi-Fi, LoRa, and proprietary protocols coexist — and where security gaps emerge.

Hey everyone 👋 In this write-up, we’ll tackle Do Not Disturb, the Day 07 challenge from TryHackMe’s Hacker Holidays 2026 event. This…

From Reconnaissance to Exploitation — Everything You Need in One Place

Blinkit’s delay in “back in stock” notifications caused me to miss out on limited edition HotWheels, so over the weekend, I decided to…

$200 for one SSRF bug most hunters would've missed - a screenshot renderer leaking internal metrics. My first bounty, full breakdown.

Hello everyone 👋, In this write-up we’ll tackle Day 8 of the TryHackMe Hackers’ Holiday 2026 event—"Towel on the Sunbed.” We’ll walk…

Introduction

WebGPU Gives Websites Access to Your GPU. So Why Can’t a Page Read Your VRAM?

Views are my own(I have reports pending on Com Olho, so technically I’m a shareholder in their backlog)

Complete PoC included. Build the vulnerable app, run the exploit yourself, watch the token get stolen, then patch it. Every command, every…