Research reveals the widely used open source library 'easyjson' is controlled by developers linked to Russia's VK Group, raising security concerns.

It’s… another week, and another vendor who is apparently experienced with ransomware gangs but yet struggles with email.

In what we've seen others term "the watchTowr treatment", we are once again (surprise, surprise) disclosing vulnerability research that…

In this article, I explained how to setup and use (GitHub CodeSpaces) for bug hunting

From Invalid Reports to Real Vulnerabilities: The Path to Growth in Hacking

Hacking the Frontend Logic: Exploiting JavaScript Business Flaws 💼

Automate open redirection detection, save hours of manual testing, and level up your bug bounty recon game.

Today, I’m excited to share how I found an open redirect vulnerability by manipulating the Referer header on a bug bounty program. In this article, I’ll walk you through: An open redirect happens…

Two-factor authentication (2FA) is widely seen as one of the best ways to secure user accounts. Whether it’s through SMS codes, authenticator apps, or hardware tokens, 2FA is meant to protect users…

Introduction

Hey there!😁

Hey there!😁

How a Simple S3 Misconfiguration Exposed Private Images Across Shopify Stores and Earned a $2,900 Bounty

Entenda o que é o Cobalt Strike, como ele impactou as relações Brasil-Paraguai e como proteger sua empresa contra essa ameaça cibernética crescente.

As technology is embedding itself deeper and deeper into our daily lives, digital attackers are getting increasingly more sophisticated…

Manual recon is underrated — and this bug proves it.

Hi all,  I’m a security researcher and love doing bug bounties. I created this tool for making subdomain scanning neater and smoother…

In a recent penetration testing engagement, I was tasked with assessing the security of a web application designed to manage test metrics…

My Introduction

Introduction:

Hey there!😁

In this article, I explained how to setup and use (GitHub CodeSpaces) for bug hunting