1. Introduction

A hands-on cybersecurity assessment covering vulnerability discovery, exploitation evidence, risk analysis, and remediation in an…

My practical learning notes from PortSwigger Web Security Academy

How I tested a TrackingId cookie, investigated PostgreSQL errors, and learned the reasoning behind error-based SQL injection.

Cyber Security — IMT01307502 | Informatika Universitas Ciputra Surabaya

Why traditional sleep-payload scanners drown security engineers in phantom alerts during cloud network jitter, and how BlindStrike v7.0…

Blind SQL injection is one of those vulnerabilities that seems easy to understand in theory but can become challenging when you try to…

SQL injection has been sitting at or near the top of the OWASP Top 10 for over a decade, and yet it’s still one of the most common…

SQL Injection vs. XSS vs. CSRF: 1 Million Users in 20 Hours and a £400,000 Fine

TL;DR Fortinet released 10 advisories on October 13, 2026, fixing 13 Fortinet vulnerabilities across eight product lines. Two are critical: an authentication bypass in FortiSandbox (CVSS 9.6) and …