By: Pavneet Singh Bhatia

The choice between GET and POST requests when building a backend significantly impacts application security, influencing everything from…

[Write-up] DOM XSS using Web Messages.

It was well past midnight. The streets outside were silent, and the glow of my monitor was the only light in the room. After a casual sip…

Tr0ll was inspired by the constant trolling of the machines within the OSCP labs. The goal is simple, gain root and get Proof.txt from the…

The Day a Guy in Pajamas Shut Down a Nuclear Nation

CTF: https://tryhackme.com/room/blue

What NetraBharat Is — and Isn’t

The digital landscape is rapidly evolving, marked by the widespread adoption of multi-cloud strategies and an explosion in the number of…

How Knowledge Injection is Fortifying Retrieval-Augmented Code Generation Against Stealthy Security Threats

Let’s start with a confession: I knew next to nothing about cybersecurity before I joined TryHackMe.

1.0 Introduction

A Comprehensive Evaluation Approach.

🔐 Think Your Password Is Safe? Hackers Are Betting on You Being Lazy

Introduction

Most of us turn to Google without a second thought — searching for dinner ideas, checking movie times, or asking random questions at 2 a.m. But in the hands of a savvy hacker or cybersecurity expert…

SQL injection with filter bypass via XML encoding

Learn how to identify and hunt for advanced CORS misconfiguration vulnerabilities using several different testing methods. Read the article now!

Portswigger Lab API module

How a cleverly crafted desync attack revealed a hidden path to client-side compromise, JS injection and potential cookie theft

🔍 Introduction